Skip to content

Bump the dependencies group with 13 updates - #790

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/maven/master/dependencies-2aad38ef1f
Jul 15, 2026
Merged

Bump the dependencies group with 13 updates#790
github-actions[bot] merged 1 commit into
masterfrom
dependabot/maven/master/dependencies-2aad38ef1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 13 updates:

Package From To
tools.jackson.core:jackson-databind 3.2.0 3.2.1
io.opentelemetry:opentelemetry-api 1.63.0 1.64.0
io.opentelemetry:opentelemetry-sdk 1.63.0 1.64.0
io.opentelemetry:opentelemetry-sdk-testing 1.63.0 1.64.0
io.rest-assured:rest-assured 6.0.0 6.0.1
io.avaje:avaje-jex 3.7-RC2 3.7-RC3
io.avaje:avaje-jex-htmx 3.7-RC2 3.7-RC3
io.avaje:avaje-nima 1.11 1.12
io.avaje:avaje-nima-test 1.11 1.12
io.vertx:vertx-web 5.1.4 5.1.5
ch.qos.logback:logback-classic 1.5.37 1.5.38
org.junit.jupiter:junit-jupiter-api 6.1.1 6.1.2
org.junit.jupiter:junit-jupiter-engine 6.1.1 6.1.2

Updates tools.jackson.core:jackson-databind from 3.2.0 to 3.2.1

Commits

Updates io.opentelemetry:opentelemetry-api from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk-testing's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk-testing's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.rest-assured:rest-assured from 6.0.0 to 6.0.1

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.0.1 (2026-07-10)

  • Fix a JsonPath denial-of-service where oversized numeric literals in untrusted JSON were parsed into arbitrarily large BigIntegers, an O(n^2) CPU and heap cost. JSON number tokens are now capped at 1000 characters by default, configurable via JsonPathConfig.numberLengthLimit and JsonConfig.numberLengthLimit (a negative value disables the check). Thanks to Brian Lee (PhD security researcher, Georgia Tech SSLab) for the private report.
  • Use custom Jackson 3 object mapper in JsonPath (#1858) (thanks to gkiel for PR)
  • Fix Spring MockMvc cookie handling with Jakarta-only servlet APIs (fixes #1853)
  • Use Jackson 3 mapper in JsonPath deserialization when Jackson 3 is the only Jackson on the classpath (#1865) (thanks to dickerpulli for PR)
  • Add JsonPath.using(Jackson3ObjectMapperFactory) overload (#1861) (thanks to Anusha-7254 for PR)
  • Fix typo in duplicate-finder-maven-plugin phase property (#1866) (thanks to metacosm for PR)
  • Fix incorrect serialization of enum constants declared with a body when used as query/path parameters (#1799)
  • The spring-mock-mvc and spring-web-test-client modules now target Spring Framework 7 and no longer expose their own Spring version as a transitive dependency (the Spring dependencies are declared optional), so they no longer drag Spring 5 onto a Spring Boot 4 / Spring Framework 7 classpath. This removes the need for manual Spring exclusions on Spring Boot 4 (fixes #1853, #1868). Thanks to spencerarq for the detailed investigation.

Changelog 5.5.7 (2026-01-16)

  • Spring MockMvc module now supports Spring Framework 7.0 (thanks to Marcin Grzejszczak for PR)
Commits
  • 8cc835a [maven-release-plugin] prepare release rest-assured-6.0.1
  • 92551ed Sync dist and OSGi module versions during release
  • 29b55e2 Sync dist and osgi module parent versions to 6.0.1-SNAPSHOT
  • f1abe77 [ci skip] Preparing for release
  • d134dfb Target Spring Framework 7 in the Spring modules and stop leaking Spring onto ...
  • a146f56 Add AGENTS.md with ch...

    Description has been truncated

@dependabot
Bump the dependencies group with 13 updates
b5d6ac8 
Bumps the dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `3.2.0` | `3.2.1` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.0` | `6.0.1` |
| [io.avaje:avaje-jex](https://github.com/avaje/avaje-jex) | `3.7-RC2` | `3.7-RC3` |
| io.avaje:avaje-jex-htmx | `3.7-RC2` | `3.7-RC3` |
| io.avaje:avaje-nima | `1.11` | `1.12` |
| io.avaje:avaje-nima-test | `1.11` | `1.12` |
| [io.vertx:vertx-web](https://github.com/vert-x3/vertx-web) | `5.1.4` | `5.1.5` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.37` | `1.5.38` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.1.1` | `6.1.2` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.1.1` | `6.1.2` |


Updates `tools.jackson.core:jackson-databind` from 3.2.0 to 3.2.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `io.opentelemetry:opentelemetry-api` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.rest-assured:rest-assured` from 6.0.0 to 6.0.1
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-6.0.0...rest-assured-6.0.1)

Updates `io.avaje:avaje-jex` from 3.7-RC2 to 3.7-RC3
- [Release notes](https://github.com/avaje/avaje-jex/releases)
- [Commits](https://github.com/avaje/avaje-jex/commits)

Updates `io.avaje:avaje-jex-htmx` from 3.7-RC2 to 3.7-RC3

Updates `io.avaje:avaje-jex-htmx` from 3.7-RC2 to 3.7-RC3

Updates `io.avaje:avaje-nima` from 1.11 to 1.12

Updates `io.avaje:avaje-nima-test` from 1.11 to 1.12

Updates `io.vertx:vertx-web` from 5.1.4 to 5.1.5
- [Commits](vert-x3/vertx-web@5.1.4...5.1.5)

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.37...v_1.5.38)

Updates `org.junit.jupiter:junit-jupiter-api` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.1...r6.1.2)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.1...r6.1.2)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.1...r6.1.2)

---
updated-dependencies:
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jex
  dependency-version: 3.7-RC3
  dependency-type: direct:development
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jex-htmx
  dependency-version: 3.7-RC3
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jex-htmx
  dependency-version: 3.7-RC3
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-nima
  dependency-version: '1.12'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-nima-test
  dependency-version: '1.12'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-web
  dependency-version: 5.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 15, 2026
@github-actions
github-actions Bot enabled auto-merge July 15, 2026 19:54
@github-actions
github-actions Bot merged commit 0ab73ec into master Jul 15, 2026
7 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/master/dependencies-2aad38ef1f branch July 15, 2026 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants