Skip to content

Bump the alldependencies group across 1 directory with 28 updates#1835

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/alldependencies-697e79ccb8
Open

Bump the alldependencies group across 1 directory with 28 updates#1835
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/alldependencies-697e79ccb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the alldependencies group with 28 updates in the / directory:

Package From To
org.openapi.generator 7.15.0 7.23.0
org.slf4j:slf4j-api 2.0.17 2.0.18
org.slf4j:jul-to-slf4j 2.0.17 2.0.18
ch.qos.logback:logback-classic 1.5.34 1.5.38
io.opentelemetry:opentelemetry-api 1.63.0 1.64.0
io.opentelemetry:opentelemetry-sdk 1.63.0 1.64.0
io.opentelemetry:opentelemetry-exporter-logging 1.63.0 1.64.0
com.google.errorprone:error_prone_annotations 2.15.0 2.50.0
io.swagger.core.v3:swagger-core 2.2.23 2.2.52
io.dropwizard.metrics:metrics-core 4.2.12 4.2.39
io.dropwizard.metrics:metrics-servlets 4.2.12 4.2.39
io.prometheus:prometheus-metrics-instrumentation-dropwizard 1.6.1 1.8.0
io.prometheus:prometheus-metrics-exporter-servlet-javax 1.6.1 1.8.0
com.fasterxml.jackson.core:jackson-databind 2.22.0 2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.22.0 2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.0 2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.22.0 2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.22.0 2.22.1
io.jsonwebtoken:jjwt-api 0.11.5 0.13.0
io.jsonwebtoken:jjwt-jackson 0.11.5 0.13.0
io.jsonwebtoken:jjwt-impl 0.11.5 0.13.0
com.oracle.database.jdbc:ojdbc11 23.26.1.0.0 23.26.2.0.0
org.freemarker:freemarker 2.3.32 2.3.34
com.github.javaparser:javaparser-core 3.26.2 3.28.2
com.github.javaparser:javaparser-symbol-solver-core 3.26.2 3.28.2
org.apache.tomcat.embed:tomcat-embed-core 9.0.118 9.0.120
org.apache.tomcat.embed:tomcat-embed-jasper 9.0.118 9.0.120
org.apache.tomcat:tomcat-jdbc 9.0.118 9.0.120

Updates org.openapi.generator from 7.15.0 to 7.23.0

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates ch.qos.logback:logback-classic from 1.5.34 to 1.5.38

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

  1. • Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the <condition> element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • d04984a prepare release 1.5.38
  • 4fffda6 updateversion of maven-gpg-plugin
  • 7ee48a1 Fixed a typo where java,lang.Throwable was written with a comma instead of a ...
  • 84580a2 remove license profile
  • f817c8d start work on 1.5.28-SNAPSHOT
  • c1df7f5 prepare release 1.5.37
  • a189967 remove conditional based on janino
  • aaa9052 start work on 1.5.37-SNAPSHOT
  • 9b94c37 prepare release 1.5.36
  • e6a8280 prevent attacks using disallowed references
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-exporter-logging from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-exporter-logging's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-exporter-logging's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits
  • fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
  • 0260567 Prepare 1.64.0 (#8582)
  • 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
  • 0004c7e Use shared workflow failure issue (#8581)
  • 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
  • e29f345 Remove duplicate declarative config resolver (#8579)
  • 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
  • 91cbb32 Update otelbot token workflows to use client IDs (#8580)
  • 38dfb98 Update fossas/fossa-action action to v2 (#8577)
  • d79e509 Update weekly update (#8576)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-exporter-logging from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-exporter-logging's releases.

Version 1.64.0

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
  • Only set valuesRecorded in AggregatorHandle when false (#8559)
  • Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
  • Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

  • Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

  • BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
  • OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
  • OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
  • OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
  • Prometheus: Add translation strategy support (#8346)
  • Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

  • BREAKING Declarative config: Move experimental types to internal package (#8530)
  • Declarative config: Commit generated schema POJOs to git (#8408)
  • Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
  • Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
  • Declarative config: Add ref descriptions to generated model classes (#8540)
  • Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
  • Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-exporter-logging's changelog.

Version 1.64.0 (2026-07-10)

API

  • Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
  • Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

  • BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
  • Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

  • Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
  • Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

  • Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
  • Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
  • Use failExceptionallyDescription has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 13, 2026
@dependabot
Bump the alldependencies group across 1 directory with 28 updates
267344f 
Bumps the alldependencies group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.openapi.generator | `7.15.0` | `7.23.0` |
| org.slf4j:slf4j-api | `2.0.17` | `2.0.18` |
| org.slf4j:jul-to-slf4j | `2.0.17` | `2.0.18` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.34` | `1.5.38` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-exporter-logging](https://github.com/open-telemetry/opentelemetry-java) | `1.63.0` | `1.64.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.15.0` | `2.50.0` |
| [io.swagger.core.v3:swagger-core](https://github.com/swagger-api/swagger-core) | `2.2.23` | `2.2.52` |
| [io.dropwizard.metrics:metrics-core](https://github.com/dropwizard/metrics) | `4.2.12` | `4.2.39` |
| [io.dropwizard.metrics:metrics-servlets](https://github.com/dropwizard/metrics) | `4.2.12` | `4.2.39` |
| io.prometheus:prometheus-metrics-instrumentation-dropwizard | `1.6.1` | `1.8.0` |
| io.prometheus:prometheus-metrics-exporter-servlet-javax | `1.6.1` | `1.8.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.22.0` | `2.22.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-csv](https://github.com/FasterXML/jackson-dataformats-text) | `2.22.0` | `2.22.1` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.22.0` | `2.22.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.22.0` | `2.22.1` |
| com.fasterxml.jackson.datatype:jackson-datatype-jdk8 | `2.22.0` | `2.22.1` |
| [io.jsonwebtoken:jjwt-api](https://github.com/jwtk/jjwt) | `0.11.5` | `0.13.0` |
| io.jsonwebtoken:jjwt-jackson | `0.11.5` | `0.13.0` |
| [io.jsonwebtoken:jjwt-impl](https://github.com/jwtk/jjwt) | `0.11.5` | `0.13.0` |
| com.oracle.database.jdbc:ojdbc11 | `23.26.1.0.0` | `23.26.2.0.0` |
| org.freemarker:freemarker | `2.3.32` | `2.3.34` |
| [com.github.javaparser:javaparser-core](https://github.com/javaparser/javaparser) | `3.26.2` | `3.28.2` |
| [com.github.javaparser:javaparser-symbol-solver-core](https://github.com/javaparser/javaparser) | `3.26.2` | `3.28.2` |
| org.apache.tomcat.embed:tomcat-embed-core | `9.0.118` | `9.0.120` |
| org.apache.tomcat.embed:tomcat-embed-jasper | `9.0.118` | `9.0.120` |
| org.apache.tomcat:tomcat-jdbc | `9.0.118` | `9.0.120` |



Updates `org.openapi.generator` from 7.15.0 to 7.23.0

Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18

Updates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18

Updates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18

Updates `ch.qos.logback:logback-classic` from 1.5.34 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.34...v_1.5.38)

Updates `io.opentelemetry:opentelemetry-api` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-exporter-logging` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-exporter-logging` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.63.0...v1.64.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.15.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.15.0...v2.50.0)

Updates `io.swagger.core.v3:swagger-core` from 2.2.23 to 2.2.52
- [Release notes](https://github.com/swagger-api/swagger-core/releases)
- [Commits](swagger-api/swagger-core@v2.2.23...v2.2.52)

Updates `io.dropwizard.metrics:metrics-core` from 4.2.12 to 4.2.39
- [Release notes](https://github.com/dropwizard/metrics/releases)
- [Commits](dropwizard/metrics@v4.2.12...v4.2.39)

Updates `io.dropwizard.metrics:metrics-servlets` from 4.2.12 to 4.2.39
- [Release notes](https://github.com/dropwizard/metrics/releases)
- [Commits](dropwizard/metrics@v4.2.12...v4.2.39)

Updates `io.dropwizard.metrics:metrics-servlets` from 4.2.12 to 4.2.39
- [Release notes](https://github.com/dropwizard/metrics/releases)
- [Commits](dropwizard/metrics@v4.2.12...v4.2.39)

Updates `io.prometheus:prometheus-metrics-instrumentation-dropwizard` from 1.6.1 to 1.8.0

Updates `io.prometheus:prometheus-metrics-exporter-servlet-javax` from 1.6.1 to 1.8.0

Updates `io.prometheus:prometheus-metrics-exporter-servlet-javax` from 1.6.1 to 1.8.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.0 to 2.22.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-csv` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.22.0...jackson-dataformats-text-2.22.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.0 to 2.22.1

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.22.0...jackson-dataformat-xml-2.22.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jdk8` from 2.22.0 to 2.22.1

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-csv` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.22.0...jackson-dataformats-text-2.22.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.0 to 2.22.1

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.22.0...jackson-dataformat-xml-2.22.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jdk8` from 2.22.0 to 2.22.1

Updates `io.jsonwebtoken:jjwt-api` from 0.11.5 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.11.5...0.13.0)

Updates `io.jsonwebtoken:jjwt-jackson` from 0.11.5 to 0.13.0

Updates `io.jsonwebtoken:jjwt-impl` from 0.11.5 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.11.5...0.13.0)

Updates `io.jsonwebtoken:jjwt-jackson` from 0.11.5 to 0.13.0

Updates `io.jsonwebtoken:jjwt-impl` from 0.11.5 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.11.5...0.13.0)

Updates `com.oracle.database.jdbc:ojdbc11` from 23.26.1.0.0 to 23.26.2.0.0

Updates `org.freemarker:freemarker` from 2.3.32 to 2.3.34

Updates `com.github.javaparser:javaparser-core` from 3.26.2 to 3.28.2
- [Release notes](https://github.com/javaparser/javaparser/releases)
- [Changelog](https://github.com/javaparser/javaparser/blob/master/changelog.md)
- [Commits](javaparser/javaparser@javaparser-parent-3.26.2...javaparser-parent-3.28.2)

Updates `com.github.javaparser:javaparser-symbol-solver-core` from 3.26.2 to 3.28.2
- [Release notes](https://github.com/javaparser/javaparser/releases)
- [Changelog](https://github.com/javaparser/javaparser/blob/master/changelog.md)
- [Commits](javaparser/javaparser@javaparser-parent-3.26.2...javaparser-parent-3.28.2)

Updates `com.github.javaparser:javaparser-symbol-solver-core` from 3.26.2 to 3.28.2
- [Release notes](https://github.com/javaparser/javaparser/releases)
- [Changelog](https://github.com/javaparser/javaparser/blob/master/changelog.md)
- [Commits](javaparser/javaparser@javaparser-parent-3.26.2...javaparser-parent-3.28.2)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.118 to 9.0.120

Updates `org.apache.tomcat.embed:tomcat-embed-jasper` from 9.0.118 to 9.0.120

Updates `org.apache.tomcat:tomcat-jdbc` from 9.0.118 to 9.0.120

Updates `org.apache.tomcat.embed:tomcat-embed-jasper` from 9.0.118 to 9.0.120

Updates `org.apache.tomcat:tomcat-jdbc` from 9.0.118 to 9.0.120

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-csv
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-csv
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: com.github.javaparser:javaparser-core
  dependency-version: 3.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: com.github.javaparser:javaparser-symbol-solver-core
  dependency-version: 3.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: com.github.javaparser:javaparser-symbol-solver-core
  dependency-version: 3.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: com.oracle.database.jdbc:ojdbc11
  dependency-version: 23.26.2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: io.dropwizard.metrics:metrics-core
  dependency-version: 4.2.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: io.dropwizard.metrics:metrics-servlets
  dependency-version: 4.2.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: io.dropwizard.metrics:metrics-servlets
  dependency-version: 4.2.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: io.jsonwebtoken:jjwt-api
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.jsonwebtoken:jjwt-impl
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.jsonwebtoken:jjwt-impl
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.jsonwebtoken:jjwt-jackson
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.jsonwebtoken:jjwt-jackson
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.opentelemetry:opentelemetry-exporter-logging
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.opentelemetry:opentelemetry-exporter-logging
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-servlet-javax
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-servlet-javax
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.prometheus:prometheus-metrics-instrumentation-dropwizard
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: io.swagger.core.v3:swagger-core
  dependency-version: 2.2.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 9.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-jasper
  dependency-version: 9.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-jasper
  dependency-version: 9.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.apache.tomcat:tomcat-jdbc
  dependency-version: 9.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.apache.tomcat:tomcat-jdbc
  dependency-version: 9.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.freemarker:freemarker
  dependency-version: 2.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.openapi.generator
  dependency-version: 7.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: alldependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/alldependencies-697e79ccb8 branch from d3f3264 to 267344f Compare July 20, 2026 06:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants