Repository navigation
Update all patch and minor versions - #8977
Merged
Merged
Conversation
Pull request dashboard statusMerged · refreshed 2026-10-29 18:07 UTC Status above doesn't look right?
|
renovate
Bot
force-pushed
the
renovate/all-patch-and-minor-versions
branch
3 times, most recently
from
October 28, 2026 21:18
c55b9ee to
792951e
Compare
renovate
Bot
force-pushed
the
renovate/all-patch-and-minor-versions
branch
from
October 29, 2026 13:23
792951e to
96490f9
Compare
renovate
Bot
force-pushed
the
renovate/all-patch-and-minor-versions
branch
from
October 29, 2026 15:53
96490f9 to
69e3333
Compare
…b.com/open-telemetry/opentelemetry-java into renovate/all-patch-and-minor-versions
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Member
|
Reverted errorprone update to handle in a separate PR |
jack-berg
approved these changes
Oct 29, 2026
jack-berg
enabled auto-merge (squash)
October 29, 2026 17:31
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #8977 +/- ##
=========================================
Coverage 90.37% 90.37%
Complexity 10992 10992
=========================================
Files 1020 1020
Lines 30077 30077
Branches 3929 3929
=========================================
Hits 27181 27181
Misses 1939 1939
Partials 957 957 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.22.14→0.22.159.8.1→9.8.20.162.0→0.164.00.14.2→0.14.32.78.0→2.79.04.1.0-02→4.1.1-010.7.3→0.7.42.22.3→2.22.44.6.0→4.6.11.84.3→1.85.17.1.0→7.1.22.22.3→2.22.45.5.0→5.5.15.5.0→5.5.12.50.0→2.51.02.50.0→2.51.02.50.0→2.51.01.1.14→1.1.184.6.0→4.6.10.8.15→0.8.16Release Notes
grafana/flint (aqua:grafana/flint)
v0.22.15Compare Source
Fixed
Other
gradle/gradle (gradle)
v9.8.2: 9.8.2Compare Source
The Gradle team is excited to announce Gradle 9.8.2.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.
Upgrade instructions
Switch your build to use Gradle 9.8.2 by updating your wrapper:
See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)
v0.164.0Compare Source
🚀 New components 🚀
otelcol-contrib: Add the partitioning processor to the Contrib distribution (#1727)💡 Enhancements 💡
otelcol: Add thefile_logreceiver,resource_detectionprocessor andtransformprocessor to the core distribution. (#44130)These Contrib components are priorities for stabilization.
See open-telemetry/opentelemetry-collector-contrib#44130.
🧰 Bug fixes 🧰
all: Build release binaries with Go 1.26.10 and require Alpineca-certificates2026102-r0 or later in container images. (#1722)Go 1.26.10 includes the
crypto/x509security fixes released on 2026-10-19.The updated CA bundle removes the distrusted eMudhra emSign roots, including
emSign ECC Root CA - G3.v0.163.2Compare Source
This release updates the binaries' Go version and CA bundle. It fixes #1722.
To see the collector changes in v0.163.x see v0.163.0
Changelog
6c65793[chore] Prepare release 0.163.2 (#1726)fb0342cmaint: ensure we use the latest Go and CA bundles (#1723)94fec53Update golang:1.27-alpine3.23 Docker digest to895e5fe(#1720)022f629Update github-actions deps (#1721)v0.163.1Compare Source
uber/NullAway (com.uber.nullaway:nullaway)
v0.14.3Compare Source
Many bug fixes in this release. Thanks especially to @vlsi and @subhramit for
all the contributions! As they are now committers, their many contributions are
not credited individually below.
Two bug fixes of note are #2005 and #2003, which may lead to new warnings even
outside JSpecify mode.
We have also added initial support for
@PolyNullin library models in #1813.We will continue to enhance this support, but it should be helpful in removing
some false positives from
JSpecifyExperimentalmode.containsKey(#1902)@NullMarkedconstructors by @ZedingZhang (#1929)<module>/build/reports/diff-coverage/test.txt; a// diff-coverage: ignorecomment moves a line out of that list without changing the counts (#1833)sonatype/scan-gradle-plugin (org.sonatype.gradle.plugins:scan-gradle-plugin)
v4.1.1-01Changelog
f74c555Release: 4.1.1-01ba3282cBump innersource dependencies - IQ 208 (#244)de6cbe8Changelog update for version 4.1.1-01 (#243)1ba7810CLM-54324: Replace SECURITY.md with HackerOne reporting policy (#242)b8b6b29Bump innersource dependencies (#241)078c2d4Improve workflow robustness and error handling (#240)373aac1Fix policy violations - upgrade vulnerable dependencies - INT-10746 (#239)ca6878bBump innersource dependencies (#238)2fbc336i-day: Prep work for auto dependency bumps (#237)bdf9544Manual clean up after release - INT-10729 (#236)grpc/grpc-java (io.grpc:grpc-bom)
v1.85.1What's Changed
v1.85.0gRPC Java 1.85.0 Release Notes
API Changes
e9a8c2b). High-cardinality metadata values provide little compression benefit and can churn the server's dynamic HPACK table. AddsNettyChannelBuilder.neverIndexMetadataKey()andneverIndexMetadataKeys() so callers can mark selected outbound metadata keys for HPACK's never-indexed literal representation.hasPermissions()toSecurityPoliciesand deprecate thePackageManagerversion.Behavior Changes
5fda0c7). It now accepts a port of 0 in the LDS listener address as matching any port.Bug Fixes
e58489f). Fixes a bug that caused empty payloads on retry attempts for regular xDS channels.fc43144). Because of a bug in the config selector, when ManagedChannel entered IDLE state due to resource deletion on the xDS control plane, the channel stayed stuck in IDLE state even after the resource came back online and a new rpc was executed.b3ae801). When a server or proxy sent a GOAWAY with an unrecognized HTTP/2 error code, such as 70007 from Apache httpd, Netty transport clients loggedNullPointerException: Http2Error cannot be null for GOAWAYand RPCs could hang until their deadline. Such codes are now treated as INTERNAL_ERROR, so the transport shuts down cleanly.Improvements
2858db2). This configures HTTPS endpoint identification in GrpcSslContexts and updates ClientTlsHandler to preserve an explicit empty-string opt-out. A null algorithm still falls back to HTTPS, retaining hostname verification for custom contexts that do not select an algorithm.c9ee3f8).java_grpc_libraryandjava_lite_grpc_librarynow invoke protoc through Protobuf'sproto_lang_toolchaininstead of always using@com_google_protobuf//:protoc. They now use the same protoc and protoc options asjava_proto_library.New Features
dd00881). This adds triggerEvent/onEvent APIs toServerCallandServerCall.Listener. This allows events to be triggered on theServerCalland be delivered as a listener callback.Dependencies
9799887)61b910b). netty-tcnative remains at 2.0.81.Documentation
893eb70)Thanks to
@kkalin68
@petedmarsh
square/wire (com.squareup.wire:wire-bom)
v7.1.2Compare Source
2026-10-27
Common
Kotlin
v7.1.1Compare Source
2026-10-27
Kotlin
oneoffields when callingProtoAdapter.redact(). Regenerate Kotlin sources to apply this fix (#3734)Swift
ProtoReaderstate or advancing its frame stack. Error cleanup now visits only initialized frames, preventing crashes or corruption of retained messages ([GHSA-f4vm-4gr7-vrcg][GHSA-f4vm-4gr7-vrcg])lysine-dev/okhttp (com.squareup.okhttp3:okhttp)
v5.5.12026_10_22
update is not necessary for Android devices with Google Play Services as Google has issued an
[automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed
to the compromised certificates.
google/error-prone (com.google.errorprone:error_prone_test_helpers)
v2.51.0: Error Prone 2.51.0New checks:
HashCodeInObjectsHash: Detect redundanthashCode()orObjects.hash()calls insideObjects.hash(...), and simplify single-argumentObjects.hash(x)calls toObjects.hashCode(x).LoopToTestParameter: Suggest migrating loops in unit tests toTestParameterInjector.MissingJavadoc: Flag public types that are missing Javadoc comments (disabled by default).PreferCharsetOverload: Prefer calling method and constructor overloads that accept aCharsetover those that accept aStringencoding name.PreferPreconditions: Suggest using Guava'sPreconditionsinstead of explicitif-throwstatements for parameter validation (disabled by default).RequireNonNullRefactoring: Refactor explicitif (x == null) { throw new NullPointerException(...); }checks toObjects.requireNonNull(disabled by default).SimplifyTestParameter: Remove redundant explicit value lists on@TestParameterannotations forbooleanandEnumtypes when all values are specified (disabled by default).TraditionalJavadocToMarkdown: Convert traditional/** ... */Javadoc comments into///Markdown Javadoc comments (disabled by default).ValueClassIdentity: Flag reliance on identity semantics (such as synchronization,WeakReference,IdentityHashMap, orSystem.identityHashCode) of value-based classes (disabled by default).Other changes:
CompareToZero: Upgraded from warning to error, and expanded to flag non-relational operations, unary negation, andswitchstatements/expressions oncompareToandcompareresults withoutInteger.signum.IfChainToSwitch: Enabled by default as a warning.UndefinedEquals: MergedArrayAsKeyOfSetOrMapandCollectionUndefinedEqualityintoUndefinedEquals(retaining their names asaltNames), and generalized detection of types without well-definedequalsorhashCodeacross direct equality, collection containment, and hash-based containers.EqualsIncompatibleType/TruthIncompatibleType: Flag equality comparisons between distinctrecordtypes (#6107).ReferenceEquality: Allow==comparisons onprivateclasses whose type hierarchy does not overrideObject.equals(#5865),private static finalsentinel fields,Thread(#5900), andcom.sun.source.tree.Tree.PatternMatchingInstanceof: Supportwhileandforloops, parenthesized expressions (#5843), and replacing additional redundant casts when theinstanceofalready introduces a pattern variable.DistinctVarargsChecker: Expanded to checkObjects.hash,CompletableFuture.allOf/anyOf,EnumSet.of,Sets.union/intersection/difference,Stream.concat,Math.min/max, and additional JDK, Guava, Protobuf, Truth, and Mockito methods.MustBeClosedChecker: Requirejava.lang.foreign.Arena.ofConfinedandArena.ofSharedto be closed.ImpossibleNullComparison: Flag null checks on the return value ofClass.forName.RestrictedApi/RestrictedInheritance: Added anallowedPathsattribute to allow calls or inheritance from matching file paths without a regular expression.InlineMeInliner: Support substituting type arguments at call sites when inlining generic@InlineMemethods.WellKnownKeep: Recognize Apache BeamDoFnannotations and retain open-source library annotations (Gson,Mockito,Guice,Objectify,TestParameterInjector,AutoFactory).-XepPrintTimingsto print a timing report after compilation or-XepRecordTimingsto record timings programmatically (#6079).CompilationTestHelpernow reports all lines with mismatched diagnostic expectations in a single test run rather than failing on the first mismatch (#6116).Closed issues: #4914, #5182, #5843, #5857, #5865, #5878, #5900, #6029, #6079, #6107, #6116, #6133
graalvm/native-build-tools (org.graalvm.buildtools.native)
v1.1.18Compare Source
What's Changed
Full Changelog: graalvm/native-build-tools@1.1.17...1.1.18
v1.1.17Compare Source
What's Changed
Full Changelog: graalvm/native-build-tools@1.1.16...1.1.17
v1.1.16Compare Source
What's Changed
Full Changelog: graalvm/native-build-tools@1.1.15...1.1.16
v1.1.15Compare Source
What's Changed
Full Changelog: graalvm/native-build-tools@1.1.14...1.1.15
jacoco/jacoco (jacoco)
v0.8.16: 0.8.16New Features
inclbootstrapclasses=trueis required (GitHub #2155).Non-functional Changes
Configuration
📅 Schedule: (UTC)
* 0-7 * * 2)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.