Skip to content

Bump the all group across 1 directory with 11 updates - #882

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/all-98cb462917
Open

Bump the all group across 1 directory with 11 updates#882
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/all-98cb462917

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 11 updates in the / directory:

Package From To
org.conscrypt:conscrypt-openjdk-uber 2.6.1 2.6.3
com.kohlschutter.junixsocket:junixsocket-core 2.10.1 2.11.0
com.github.luben:zstd-jni 1.5.7-11 1.5.7-15
io.micrometer:micrometer-core 1.17.0 1.17.1
io.micrometer:micrometer-observation 1.17.0 1.17.1
io.micrometer:micrometer-registry-prometheus 1.17.0 1.17.1
io.micrometer:micrometer-tracing 1.7.0 1.7.1
io.micrometer:micrometer-tracing-bridge-otel 1.7.0 1.7.1
io.opentelemetry:opentelemetry-bom 1.64.0 1.65.0
org.apache.maven.plugins:maven-toolchains-plugin 3.2.0 3.3.0
org.apache.maven:apache-maven 3.9.14 3.9.16

Updates org.conscrypt:conscrypt-openjdk-uber from 2.6.1 to 2.6.3

Release notes

Sourced from org.conscrypt:conscrypt-openjdk-uber's releases.

v2.6.3

This release uses the same Conscrypt source code as release 2.6.2, but the maven binary was compiled with this boringssl version: https://boringssl.googlesource.com/boringssl/+/refs/tags/0.20260616.0

This should fix google/conscrypt#1530

v2.6.2

Commits
  • 657e1c6 Use an Ubuntu 20.04 container to build Concrypt on GitHub CI, and make Make a...
  • 44a3630 Close contexts after each test in SSLEngineVersionCompatibilityTest. (#1524)
  • See full diff in compare view

Updates com.kohlschutter.junixsocket:junixsocket-core from 2.10.1 to 2.11.0

Release notes

Sourced from com.kohlschutter.junixsocket:junixsocket-core's releases.

junixsocket 2.11.0

  • New module: junixsocket-memory (Java 22+): SharedMemory/mmap, POSIX shm, futex-based Mutexes, memfd, etc.
  • Remove junixsocket-jetty support for Jetty 12.0.x and older (breaking change)
  • Add several new exceptions (subclasses of IOException / SocketException)
  • Add FileChannelSupplier for FileDescriptorCast
  • Add support for Astral OS; native binary not included yet
  • Add AFSocketCapability for send/receive timeout
  • Add support for AF_SYSTEM CTLIOCGINFO (number of registered kernel control names)
  • Improve/simplify check for AFServerSocket.isLocalSocketAddressValid
  • Improve exception reporting upon "accept"
  • Reduce possible local JNI refernce accumulation in poll
  • Fix NullPointerException in AFSelector
  • Fix spurious Connection-Refused in AFSocketImpl.connect
  • Fix AFSocketChannel.read returning 0 on EOF
  • Fix VirtualThread issue on machines with 1 or 2 CPUs
  • Fix spurious connect timeouts on Windows
  • Fix for TIPC: Ignore EINVAL upon setsocketopt SOL_TIPC/TIPC_GROUP_LEAVE
  • Improve selftest
  • Code cleanup and other optimizations
  • Update documentation
Commits
  • 954836d memory: test: Fix futex wakeup assumptions
  • 646a005 Set version to 2.11.0
  • 593d9d2 test: rmi: Fix testRemoteShutdownNotAllowed
  • c7e3f62 Update dependencies
  • b776161 demo: Update PostgreSQL version
  • fccc336 native: Clear JNI exceptions upon missing classes, fields
  • f3dbb95 native: Fix possible local JNI reference accumulation in poll
  • 9d55121 native: Fix error handling for NewDirectByteBuffer
  • 0adb3d9 Update NOTICE/license message to cover 2026
  • fca8b04 rmi: Add graal config for sun.rmi.transport.tcp.TCPTransport
  • Additional commits viewable in compare view

Updates com.github.luben:zstd-jni from 1.5.7-11 to 1.5.7-15

Commits
  • 212ec90 v1.5.7-15
  • f5a61ec Simplify (and hopefully fix an error) in loading the native lib
  • 3216860 Re-arange operations instead of widening to 64bits
  • 2ba10c0 Fix int overflow
  • 0d64de4 Add more checks and revert the AutoCloseBase.close() behaviour
  • efccbb7 v1.5.7-14
  • d7a1c99 More guards
  • dd08685 More guards
  • 2723368 ZstdDirectBufferCompressingStream: fix dict lifecycle
  • f38f9a1 More guards for non-null and closed streams
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-observation from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-registry-prometheus from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-observation from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-registry-prometheus from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-tracing from 1.7.0 to 1.7.1

Commits

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.0 to 1.7.1

Commits

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.0 to 1.7.1

Commits

Updates io.opentelemetry:opentelemetry-bom from 1.64.0 to 1.65.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.65.0

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

  • Ignore empty baggage keys in ImmutableBaggage.put (#8658)
  • Use NumberFormatException in baggage decoder (#8593)
  • Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

  • Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

  • Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
  • Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
  • Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

  • Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

  • Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

  • Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)
  • Record error.type on failed collections in PeriodicMetricReader (#8650)
  • Testing: Fix LongExemplarAssert.hasFilteredAttributesSatisfyingExactly to enforce exact attribute matching (#8518)

Logs

  • Fix ReadWriteLogRecord default getObservedTimestampEpochNanos returning the record timestamp (#8504)

Profiles

  • Fix profiles data model attribute count parameter name and timestamp doc unit (#8514)

Exporters

  • WARNING Zipkin: Delete opentelemetry-exporter-zipkin; the artifact is no longer published (#8677)
  • OTLP: Use HTTP error response bodies in HttpExporter warning logs (#8428)
  • OTLP: Fix OkHttpHttpSender mTLS when using the platform default trust store (#8565)
  • OTLP: Fix sign extension on LogRecord flags in the low-allocation log marshaler (#8493)
  • OTLP: Standardize OkHttpHttpSender, JdkHttpSender, and UpstreamGrpcSender shutdown to await executor/channel termination (#8495, #8627, #8624)
  • OTLP: Log the underlying except/ion when a gRPC response frame is invalid (#8626)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.65.0 (2026-08-07)

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

  • Ignore empty baggage keys in ImmutableBaggage.put (#8658)
  • Use NumberFormatException in baggage decoder (#8593)
  • Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

  • Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

  • Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
  • Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
  • Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

  • Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

  • Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

  • Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)

... (truncated)

Commits
  • 7bc11ed [release/v1.65.x] Prepare release 1.65.0 (#8705)
  • 60d7ecf Prepare 1.65.0 (#8700)
  • 6d41aa4 Bound jaeger-baggage parsing work by tokens rather than accepted entries (#8702)
  • db1d6be Enforce last-value-wins semantics in AttributesMap without performance regres...
  • 995cb3c Avoid unsafe string encoder on Android (#8637)
  • 48b0185 Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • 2009d58 Avoid exposing configuration values in errors (#8669)
  • 3cafbbb Deprecate OpenCensus shim public API (#8674)
  • 0e033e2 Remove stray token from addLogRecordProcessorCustomizer Javadoc (#8641)
  • 3d1cce8 Fix ObfuscatedLoggerProvider Javadoc copy-paste example (#8639)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-toolchains-plugin's releases.

3.3.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 52474c0 [maven-release-plugin] prepare release maven-toolchains-plugin-3.3.0
  • 39e84b2 Update toolchains documentation to use JSR-330 terminology and links (#165)
  • a213292 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 2402d77 Replace Plexus XML configuration with JSR-330 annotated beans (#160)
  • ab80fc8 Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#161)
  • 525f40c Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#163)
  • d3960b9 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#164)
  • e0b39a6 Add .asf.yaml project metadata for ATR
  • e53bcec Add tag-template to release-drafter config
  • df6df08 Update site descriptors and download page content
  • Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.14 to 3.9.16

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group across 1 directory with 11 updates
e84a794 
Bumps the all group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.6.1` | `2.6.3` |
| [com.kohlschutter.junixsocket:junixsocket-core](https://github.com/kohlschutter/junixsocket) | `2.10.1` | `2.11.0` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-11` | `1.5.7-15` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-tracing](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |
| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.64.0` | `1.65.0` |
| [org.apache.maven.plugins:maven-toolchains-plugin](https://github.com/apache/maven-toolchains-plugin) | `3.2.0` | `3.3.0` |
| org.apache.maven:apache-maven | `3.9.14` | `3.9.16` |



Updates `org.conscrypt:conscrypt-openjdk-uber` from 2.6.1 to 2.6.3
- [Release notes](https://github.com/google/conscrypt/releases)
- [Commits](google/conscrypt@2.6.1...2.6.3)

Updates `com.kohlschutter.junixsocket:junixsocket-core` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/kohlschutter/junixsocket/releases)
- [Commits](kohlschutter/junixsocket@junixsocket-2.10.1...junixsocket-2.11.0)

Updates `com.github.luben:zstd-jni` from 1.5.7-11 to 1.5.7-15
- [Commits](luben/zstd-jni@v1.5.7-11...v1.5.7-15)

Updates `io.micrometer:micrometer-core` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-tracing` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.opentelemetry:opentelemetry-bom` from 1.64.0 to 1.65.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.64.0...v1.65.0)

Updates `org.apache.maven.plugins:maven-toolchains-plugin` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/apache/maven-toolchains-plugin/releases)
- [Commits](apache/maven-toolchains-plugin@maven-toolchains-plugin-3.2.0...maven-toolchains-plugin-3.3.0)

Updates `org.apache.maven:apache-maven` from 3.9.14 to 3.9.16

---
updated-dependencies:
- dependency-name: org.conscrypt:conscrypt-openjdk-uber
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.kohlschutter.junixsocket:junixsocket-core
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-toolchains-plugin
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants