Update all non-major maven dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.shared:maven-filtering (source)	3.2.0 → 3.4.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom	2.15.0 → 2.24.0
org.flywaydb:flyway-database-postgresql (source)	11.0.0 → 11.20.2
org.flywaydb:flyway-maven-plugin (source)	11.0.0 → 11.20.2
org.flywaydb:flyway-core (source)	11.0.0 → 11.20.2

---

Release Notes

open-telemetry/opentelemetry-java-instrumentation (io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom)

v2.24.0

Compare Source

⚠️ Breaking Changes

• Remove support for previously deprecated property
  otel.instrumentation.logback-appender.experimental.capture-logstash-attributes
  (#​15722)
• Remove deprecated methods from HTTP library instrumentations
  (#​15802)

🚫 Deprecations

• JMX Metrics: Deprecated addClassPathRules and addCustomRules methods in
  JmxTelemetryBuilder, and moved non-public classes to an internal package
  (#​15658)
• Deprecated setMessagingReceiveInstrumentationEnabled in favor of
  setMessagingReceiveTelemetryEnabled to match config property name
  (#​15668)
• Deprecated database client attribute getter methods getDbSystem() and getResponseStatus()
  in favor of getDbSystemName() and getResponseStatusCode() to align with stable semantic
  conventions
  (#​15696)
• Deprecated setCapturedRequestParameters() in Servlet library instrumentation in favor of
  Experimental.setCapturedRequestParameters() as request parameter capture is experimental
  (#​15826)
• Deprecated getHttpClient(), setHttpClientTransport(), and setSslContextFactory() in Jetty
  client instrumentation in favor of new builder-style methods newHttpClient(),
  newHttpClient(SslContextFactory), and newHttpClient(HttpClientTransport, SslContextFactory)
  (#​15827)
• Deprecate Netty experimental method that is still in public API
  (#​15828)
• Deprecated newHttpClient() in favor of wrap() in Java HTTP Client instrumentation for
  consistency with naming conventions across library instrumentations
  (#​15829)
• Deprecated new* methods in favor of create* methods across multiple instrumentation libraries
  for consistency (e.g., newHttpClient() → createHttpClient(), newInterceptor() →
  createInterceptor())
  (#​15832)
• Deprecated methods in SqlStatementInfo and MultiQuery in favor of methods using stable
  semantic convention terminology: getFullStatement() → getQueryText(), getOperation() →
  getOperationName(), and getStatements() → getQueryTexts()
  (#​15833)
• Deprecated database getter methods in favor of methods using stable semantic convention
  terminology: getResponseStatusCode() → getDbResponseStatusCode(), getBatchSize() →
  getDbOperationBatchSize(), and getQueryParameters() → getDbQueryParameters()
  (#​15859)

📈 Enhancements

• Spring Boot starter: add support for
  otel.instrumentation.logback-appender.experimental.capture-template
  (#​15649)
• Spring Boot Starter: Support Spring Boot 4 RestClient
  (#​15684)
• Improve support for experimental declarative configuration
  (#​15656,
  #​15688,
  #​15697,
  #​15698,
  #​15704,
  #​15707,
  #​15713,
  #​15714,
  #​15722,
  #​15727,
  #​15732,
  #​15733,
  #​15734,
  #​15735,
  #​15740,
  #​15741,
  #​15742,
  #​15752,
  #​15756,
  #​15787,
  #​15791,
  #​15792,
  #​15841,
  #​15856)
• AWS Bedrock: support model IDs with regional prefixes (e.g., us., global.) for
  inference profiles
  (#​15751)
• Redis: Improve sanitization for ACL command
  (#​15797)
• Ktor and Netty library instrumentations: Add setSpanNameExtractorCustomizer
  (#​15825)
• Support more of stable database semconv under opt-in flag
  (#​15836,
  #​15854)
• Move SpanStatusExtractor.extract() before OperationListener.onEnd() in Instrumenter
  (#​15844)

🛠️ Bug fixes

• Servlet library instrumentation: fix capturing enduser.id
  (#​15858)
• Fix agent startup failing on read-only filesystem
  (#​15682)

v2.23.0

Compare Source

⚠️ Breaking Changes

• ActiveMQ Classic JMX metrics: rename attributes and metrics to align
  with semantic conventions (see PR description for specifics)
  (#​14996)
• Library instrumentation: remove previously deprecated methods from telemetry builders
  (#​15324)
• Logback: captureArguments no longer captures message template, use captureTemplate
  (#​15423)
• Play: disable controller spans by default,
  re-enable with otel.instrumentation.common.experimental.controller-telemetry.enabled=true
  (#​15604)

🚫 Deprecations

• Library instrumentation: deprecate setSpanNameExtractor() and setStatusExtractor()
  in favor of setSpanNameExtractorCustomizer() and setStatusExtractorCustomizer()
  (#​15529)

🌟 New javaagent instrumentation

• Apache ElasticJob
  (#​14933)

🌟 New library instrumentation

• Apache Iceberg
  (#​15114)
• Servlets
  (#​15473)

📈 Enhancements

• Spring starter: add declarative config logging exporter
  (#​14917)
• Failsafe: add support for RetryPolicy
  (#​15255,
  #​15537)
• GraphQL: add option to disable capturing query documents
  (#​15384)
• JMX metrics: allow any classpath resource path in rules
  (#​15413)
• Spring Boot actuator autoconfigure: support Spring Boot 4
  (#​15433)
• Spring JMS: support Spring Boot 4
  (#​15434)
• Spring starter: support Spring Boot 4
  (#​15459)
• Lettuce: support custom ClientResources
  (#​15470)
• Lettuce: add reactor-core compatibility checker
  (#​15472)
• Servlet: propagate context explicitly for async runnables
  (#​15476)
• Servlet: always add trace_id and span_id attributes to requests
  (#​15485)
• Pekko HTTP: separate route instrumentation from HTTP server instrumentation
  (#​15499)
• MongoDB: emit versioned scope name
  (#​15500)
• Spring WebFlux: support Spring Boot 4
  (#​15502,
  #​15574)
• Spring WebMVC: support Spring Boot 4
  (#​15525)
• Spring Cloud Gateway: support Spring Boot 4
  (#​15540)
• Spring starter: add missing Kafka configuration options
  (#​15592)
• OpenTelemetry API interop: support new GlobalOpenTelemetry methods introduced in 1.57
  (#​15620)

🛠️ Bug fixes

• Spring Web/WebFlux: restore GraalVM native-image compatibility
  (#​15306)
• Spring Kafka: end span in afterRecord callback
  (#​15367)
• Spring starter: fix environment variable overrides for array properties in declarative config
  (#​15424)
• Ktor: prevent double end() calls in KtorServerTelemetry
  (#​15452)
• OpenTelemetry API interop: fix null handling in ExtendedOpenTelemetry declarative config
  (#​15478)
• Akka HTTP: fix http.route attribute capture and span naming
  (#​15504)
• Extensions: fix SPI loading for InstrumenterCustomizerProvider and related classes
  (#​15538)
• Sanitize sql statements that may contain unquoted passwords
  (#​15607)

v2.22.0

Compare Source

⚠️ Breaking Changes

• AWS SDK 2.x attributes updated to align with semantic conventions
  (#​15028)
  • The following attributes have been renamed:
    • aws.bucket.name (S3) → aws.s3.bucket
    • aws.queue.url (SQS) → aws.sqs.queue.url
    • aws.stream.name (Kinesis) → aws.kinesis.stream_name
    • aws.table.name (DynamoDB) → aws.dynamodb.table_names
    • aws.dynamodb.provisioned_throughput.read_capacity_units → aws.dynamodb.provisioned_read_capacity (type changed from long to double)
    • aws.dynamodb.provisioned_throughput.write_capacity_units → aws.dynamodb.provisioned_write_capacity (type changed from long to double)
    • aws.dynamodb.exclusive_start_table_name → aws.dynamodb.exclusive_start_table
    • aws.dynamodb.projection_expression → aws.dynamodb.projection
    • aws.dynamodb.scan_index_forward → aws.dynamodb.scan_forward
  • The following attribute types have changed:
    • aws.dynamodb.table_names: string → string[]
    • aws.dynamodb.consumed_capacity: string → string[]
    • aws.dynamodb.global_secondary_indexes: string → string[]
    • aws.dynamodb.local_secondary_indexes: string → string[]
    • aws.dynamodb.consistent_read: string → boolean
    • aws.dynamodb.table_count: string → long
    • aws.dynamodb.limit: string → long
    • aws.dynamodb.attributes_to_get: string → string[]
    • aws.dynamodb.segment: string → long
    • aws.dynamodb.total_segments: string → long
    • aws.dynamodb.count: string → long
    • aws.dynamodb.scanned_count: string → long
  • The following attributes are no longer emitted by default but can be enabled with
    otel.instrumentation.aws-sdk.experimental-span-attributes=true:
    • aws.queue.name (SQS)
    • aws.lambda.function.name (Lambda)
    • aws.lambda.function.arn (Lambda)
• JDBC library data source instrumentation now disabled by default
  (#​15074)
• JMX state metrics unit changed from empty string to 1 to align with semantic conventions
  (#​15093)
• AWS SDK 1.x attributes updated to align with semantic conventions
  (#​15094)
  • Only affects users with otel.instrumentation.aws-sdk.experimental-span-attributes=true
  • The following attributes have been renamed and are now emitted by default (no experimental flag required):
    • aws.bucket.name (S3) → aws.s3.bucket
    • aws.queue.url (SQS) → aws.sqs.queue.url
    • aws.stream.name (Kinesis) → aws.kinesis.stream_name
    • aws.table.name (DynamoDB) → aws.dynamodb.table_names
• Finatra controller spans now disabled by default to match other controller spans
  (#​15118)
• Netty HTTP request wrapper class renamed from HttpRequestAndChannel to NettyRequest
  (#​15247)
• JSP compile spans now disabled by default to match other view spans
  (#​15261)

🚫 Deprecations

• TracingConsumerInterceptor and TracingProducerInterceptor deprecated in favor of new configurable interceptors
  (#​14929)
• Various builder methods updated to use UnaryOperator instead of Function<X, X>
  (#​15101)
• DbClientCommonAttributesGetter deprecated in favor of DbClientAttributesGetter
  (#​15139)

🌟 New javaagent instrumentation

• Add JFinal instrumentation
  (#​15216)

📈 Enhancements

• Avoid Unsafe usage on Java 23+
  (#​14855,
  #​15091)
• Update Azure SDK instrumentation so az.namespace can be used for sampling
  (#​15068)
• Spring Boot Starter: Add cache to reduce environment variable lookups
  (#​15132)
• HTTP instrumentations now emit semantic convention schema URL
  (#​15144)
• Added instrumentation support for AsyncHttpClient version 1.8
  (#​15195)
• Instrumenter customizer now receives instrumentation type
  (#​15227)
• Added support for Spring Framework 7.0
  (#​15287,
  #​15299,
  #​15301,
  #​15304,
  #​15311,
  #​15362,
  #​15371)
• Added span status customizer to incubating InstrumenterCustomizer API
  (#​15288)
• Added configuration options for sqlcommenter
  (#​15169)
• GraphQL instrumentation now records data fetcher errors
  (#​15289)
• Add http client url template customizer
  (#​15217)
• Introduce idiomatic JmxTelemetry API for JMX metrics library
  (#​15220)
• Add instrumentation for OpenTelemetry API incubator's ExtendedOpenTelemetry
  (#​15178)

🛠️ Bug fixes

• Fix missing peer.service in Netty HTTP spans
  (#​14963)
• Fix Couchbase span kind to be CLIENT instead of INTERNAL
  (#​14995)
• Link attributes are now bridged to the Java agent when using OpenTelemetry API
  (#​15143)
• Potential race condition in JFR runtime metrics initialization fixed
  (#​15231)
• Regression fixed related to context propagation when using Spring @EnableAsync
  (#​15249)
• Declarative configuration now uses snake_case for distro resource provider attribute name
  (#​15260)
• Logback appender fixed to capture Logstash StructuredArguments.entries()
  (#​15341)
• Fix context propagation in Spring WebFlux 7.0 client reactive callbacks
  (#​15336)

v2.21.0

v2.20.1

Compare Source

🛠️ Bug fixes

• Backport: Update the OpenTelemetry SDK version to 1.54.1
  (#​14720)

v2.20.0

Compare Source

Migration notes

• The configuration option used to enable traces generated by the dropwizard-views instrumentation has changed from otel.instrumentation.common.experimental.controller-telemetry.enabled to otel.instrumentation.common.experimental.view-telemetry.enabled
  (#​14475)
• Deprecated (and -alpha) SpanNames class was removed
  (#​14582)

🌟 New javaagent instrumentation

• Add ClickHouse client v2 instrumentation
  (#​14501)

📈 Enhancements

• Add code attributes for log4j1
  (#​13947)
• Add headers capture feature to Kafka 2.6 interceptors
  (#​14290)
• Support custom exception handling from logger instrumentation
  (#​14493)
• Add call depth check to executor instrumentation
  (#​14546)
• Add Spring starter thread details support
  (#​14449)
• Let AWS Lambda SQS handlers report partial batch failures
  (#​14468)
• Instrument instrumentation suppression API
  (#​14565)
• Declarative config: update file version support
  (#​14593)
• Add url.template support to Spring 6 RestTemplate
  (#​14612)
• Declarative config: add missing resource providers
  (#​14222)
• Declarative config: map common-enabled property
  (#​14589)

🛠️ Bug fixes

• Fix non-lowercase messaging headers capture
  (#​14479)
• Fix JUL logger methods parameter mismatch
  (#​14531)
• Fix a test failure with latest Mongo release
  (#​14642)

🧰 Tooling

• Add constructor to AgentClassLoader for custom parent ClassLoader
  (#​14480)
• Declarative config: make bridge usable by Spring starter and contrib
  (#​14497,
  #​14548)
• Reduce log level for main jar detection
  (#​14528)

v2.19.0

Compare Source

📈 Enhancements

• Align WildFly metrics with semantic conventions
  (#​14208)
• Add streaming chat instrumentation for OpenAI SDK
  (#​14271)
• Add OpenAI async client instrumentation support
  (#​14322)
• Add embeddings instrumentation for OpenAI client
  (#​14353)
• Support OpenAI 3.0
  (#​14423)

🛠️ Bug fixes

• Fix OpenTelemetryDataSource error when refresh configuration
  (#​14255)
• Fix NPE when consuming Kafka messages with null headers
  (#​14332)
• Fix RxJava context propagation for ObservableFromCallable
  (#​14393)
• Avoid test failures on Spring Boot 4-m1
  (#​14420)

🧰 Tooling

• Add support for extensions in attributesExtractors, contextCustomizers, operationListeners and spanNameExtractor
  (#​13917)
• Add declarative config early initialization and property mapping support
  (#​14184)
• Add consistent exclusion of boot libraries
  (#​14306)
• Build smoke-test-fake-backend Docker image for ARM64 architecture
  (#​14387)
• Implement all JUL Logger methods in PatchLogger
  (#​14409)

v2.18.1

Compare Source

🛠️ Bug fixes

• Backport: Shade new io.opentelemetry.common package in the bootstrap class loader
  (#​14283)

v2.18.0

Compare Source

🌟 New javaagent instrumentation

• Add initial instrumentation for OpenAI client
  (#​14221)

🌟 New library instrumentation

• Add initial instrumentation for OpenAI client
  (#​14221)

📈 Enhancements

• Implement stable semantic conventions for code.* attributes with opt-in support
  (#​13860)
• Add span kind configuration support for method instrumentation and declarative tooling
  (#​14014)
• Add support for vendor-specific declarative configuration properties
  (#​14016)
• Add auto-instrumentation support for AWS Secrets Manager SDK v1
  (#​14027)
• Add aws.sns.topic.arn semantic convention support for AWS SNS SDK v1 and v2
  (#​14035)
• Remove thread.name attribute from experimental JVM metrics
  (#​14061)
• Enhance and align Jetty JMX metrics with OpenTelemetry semantic conventions
  (#​14067)
• Add support for latest spring-cloud-aws versions
  (#​14207)
• Add JDBC parameter capture support for PreparedStatement.setObject() method
  (#​14219)
• Add aws.lambda.resource.mapping.id and experimental Lambda attributes for AWS Lambda SDK
  (#​14229)
• Clear context class loader from OpenTelemetry internal threads to prevent leaks
  (#​14241)

🛠️ Bug fixes

• Fix JDBC URL parser StringIndexOutOfBoundsException with malformed connection strings
  (#​14151)
• Fix empty units in JMX state metrics definitions
  (#​14194)

v2.17.1

Compare Source

🛠️ Bug fixes

• Backport: Fix invalid jmx state metrics empty unit
  (#​14195)

v2.17.0

Compare Source

Migration notes

• Changes have been made to Tomcat metric definitions provided by JMX Metric Insight component
  • metric http.server.tomcat.errorCount --> tomcat.error.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.requestCount --> tomcat.request.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.maxTime --> tomcat.request.duration.max
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.processingTime --> tomcat.request.duration.sum
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.traffic --> tomcat.network.io
    • attribute: name --> tomcat.request.processor.name, direction --> network.io.direction
  • metric http.server.tomcat.sessions.activeSessions --> tomcat.session.active.count
    • attribute: context --> tomcat.context
  • metric http.server.tomcat.threads split into two metrics: tomcat.thread.count and tomcat.thread.busy.count
    • attribute: name --> tomcat.thread.pool.name, state removed

📈 Enhancements

• JMX metrics: require explicit unit in yaml
  (#​13796)
• Remove deprecated methods from runtime-telemetry
  (#​13885)
• ClickHouse JDBC URL support
  (#​13884)
• Support Vert.x HTTP client version 5.0
  (#​13903)
• Add metric jvm.file_descriptor.count to jvm runtime experimental metrics
  (#​13904)
• Add support for Vert.x SQL client version 5.0
  (#​13914)
• JMX Metric Insights - improved Tomcat metrics alignment to semconv
  and added new Tomcat metrics tomcat.session.active.limit and tomcat.thread.limit
  (#​13650)
• Apply method instrumentation only to methods
  (#​13949)
• Apply external annotation instrumentation only to methods
  (#​13948)
• Log start of spring boot starter
  (#​13882)
• Update the OpenTelemetry SDK version to 1.51.0
  (#​13992)
• Capture finatra code function name
  (#​13939)
• AWS SDK v2 Secrets Manager auto-instrumentation support
  (#​14001)
• AWS SDK v1 Step Functions auto-instrumentation support
  (#​14003)
• Add auto-instrumentation support for AWS Step Functions SDK v2
  (#​14028)
• Skip propagating context into mysql jdbc cleanup thread
  (#​14060)

🛠️ Bug fixes

• Fix instrumentation failure when constructor has @​WithSpan annotation
  (#​13929)
• Fix structured concurrency support on jdk 25
  (#​13936)
• Fix Spring boot starter fails to load when an OpenTelemetry Bean is supplied
  (#​13972)
• Fix UCP instrumentation scope name
  (#​14029)
• Preload ThreadLocalRandom to avoid java.lang.ClassCircularityError: java/util/concurrent/ThreadLocalRandom
  (#​14030)

v2.16.0

Compare Source

⚠️⚠️ Breaking changes ⚠️⚠️

• Remove operation name from graphql span name
  (#​13794)
• Remove deprecated property for disabling kafka metrics
  (#​13803)

🌟 New javaagent instrumentation

• Add Avaje Jex Instrumentation
  (#​13733)

📈 Enhancements

• Add Gen AI support for additional models
  (#​13682)
• Add JVM metrics to JMX instrumentation
  (#​13392)
• Add jvm.file_descriptor.count metric to JMX instrumentation
  (#​13722)
• Optimize lettuce argument splitter regex
  (#​13736)
• Re-enable Agent Detection on z/OS
  (#​13730)
• Add GC cause as an opt-in attribute on jvm GC related metric
  (#​13750)
• Implement stable semconv for db connection pool metrics
  (#​13785)
• Add Cloud foundry resource provider
  (#​13782)
• Add instrumentation for opensearch-rest-3.0
  (#​13823)
• Run tests with jdk24 and 25-ea
  (#​13824)
• Propagate context into CompletableFuture returned from aws2 async client methods
  (#​13810)
• Added opt-in instrumentation for transaction commit/rollback in jdbc
  (#​13709)
• Added experimental opt-in JDBC db.query.parameter.<key> span attributes
  (#​13719)
• Add tools support to bedrock InvokeModel instrumentation
  (#​13832)

🛠️ Bug fixes

• Fix instrumentation for ibm https url connection connect
  (#​13728)
• Don't wrap null ResultSet in jdbc library instrumentation
  (#​13758)
• Fix NPE in netty 3.8 instrumentation
  (#​13801)
• Fix ending server span with servlet async request
  (#​13830)

🧰 Tooling

• Allow advice to define custom mappings
  (#​13751)

flyway/flyway (org.flywaydb:flyway-database-postgresql)

v11.20.2

v11.20.1

v11.20.0

v11.19.1

v11.19.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 58.02%. Comparing base (6b141f8) to head (31545d6).
Report is 3 commits behind head on master.

❗ Current head 31545d6 differs from pull request most recent head 52e6b81. Consider uploading reports for the commit 52e6b81 to get more accurate results

Additional details and impacted files

@@             Coverage Diff              @@
##             master      #22      +/-   ##
============================================
- Coverage     58.23%   58.02%   -0.22%     
- Complexity       70       71       +1     
============================================
  Files            18       18              
  Lines           352      355       +3     
  Branches         33       33              
============================================
+ Hits            205      206       +1     
- Misses          130      132       +2     
  Partials         17       17              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.