Update all non-major maven dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.opentelemetry:opentelemetry-exporter-otlp	1.41.0 -> 1.54.1
io.opentelemetry:opentelemetry-sdk	1.41.0 -> 1.54.1
org.apache.httpcomponents.core5:httpcore5 (source)	5.2.1 -> 5.3.6
io.opentelemetry:opentelemetry-api	1.41.0 -> 1.54.1
org.apache.httpcomponents.client5:httpclient5 (source)	5.2.1 -> 5.5.1
org.apache.commons:commons-pool2 (source)	2.11.1 -> 2.12.1

---

Release Notes

open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-exporter-otlp)

v1.54.1

Compare Source

SDK

Exporters

• Prometheus: Fix regression in protobuf format export
  (#​7664)

v1.54.0

Compare Source

API

Baggage

• Fix guard against ArrayIndexOutOfBoundsException in BaggageCodec
  (#​7239)

SDK

Metrics

• Fix MetricData.getDoubleSumData() ClassCastException with custom implementations
  (#​7597)

Exporters

• Fix HttpExporterBuilder.copy() and GrpcExporterBuilder.copy() to preserve component loader
  (#​7596)

Extensions

• Autoconfigure: Remove support for old EnvironmentResourceProvider package name
  (#​7622)
• Declarative config: Add DeclarativeConfigurationProvider SPI
  (#​7472)
• Declarative config: Pass meter provider to avoid using the global OpenTelemetry instance
  (#​7475)

Project tooling

• Update to Gradle v9
  (#​7590)

v1.53.0

Compare Source

SDK

• File based config will log the wrong file format, when applicable.
  (#​7498)

Exporters

• Change okhttp dependency to okhttp-jvm, which fixes missing class failures in
  transitive dependencies.
  (#​7517)

v1.52.0

Compare Source

API

Common

• Promote ComponentLoader to new opentelemetry-common artifact,
  standardize SPI loading
  (#​7446)

Context

• LazyStorage passes its ClassLoader when loading ContextStorageProvider SPI
  (#​7424)

Incubator

• Add context and severity params to ExtendedLogger#isEnabled
  (#​7268)
• Add new convenience methods for converting DeclarativeConfigProperties to config model
  (#​7453)

SDK

• Add custom stacktrace renderer which is length limit aware
  (#​7281)

Metrics

• Propagate flush to PeriodicMetricReader's metricExporter.
  (#​7410)

Exporters

• OTLP - JdkHttpSender: ensure proper closure of HttpClient in shutdown method
  (#​7390)
• OTLP: profile exporters fix and test improvements
  (#​7442)
• OTLP: Loading Compressor SPI via ComponentLoader configured through setComponentLoader
  (#​7428)
• Prometheus: add scope schema URL and attributes
  (#​7356)
• Prometheus: extend prometheus declarative config support to include without_scope_info,
  with_resource_constant_labels
  (#​6840)

Extensions

• Autoconfigure: fix race condition of GlobalOpenTelemetry initialization with
  AutoConfiguredOpenTelemetrySdkBuilder
  (#​7365)
• Declarative config: update to declarative config 1.0-rc.1
  (#​7436)
• Declarative config: resolve environment variable substitution for mixed quotes
  (#​7433)

v1.51.0

Compare Source

API

Context

• Fix context storage provider property name in log message
  (#​7342)

SDK

• Experimental configurable exception.* attribute resolution for SdkTracerProvider,
  SdkLoggerProvider
  (#​7266)

Exporters

• All exporters: implement new SemConv exporter health metrics, with configuration API for selecting
  schema version
  (#​7265)
• OTLP: Add gRPC export for profiles signal type.
  (#​7301)
• OTLP: Run JDK HTTP sender on non-daemon threads.
  (#​7322)
• Prometheus: fix serialization of arrays
  (#​7291)
• OTLP: exporter tolerates instances of LogRecordData when incubator is present
  (#​7393)

Extensions

• Declarative config: Handle instrumentation node changes in yaml config file format 0.4
  (#​7357)

v1.50.0

Compare Source

API

• Clarify that AttributesBuilder.put allows nulls
  (#​7271)
• Stabilize log record event name
  (#​7277)

Context

• Fix duplicated ExecutorService wrap
  (#​7245)
• Promote getAll to TextMapGetter stable API
  (#​7267)

Incubator

• Add ExtendedLogRecordBuilder#setException
  (#​7182)
• Add experimental support for log extended attributes
  (#​7123)

SDK

• Remove Java9VersionSpecific clock implementation
  (#​7221)
• Add addProcessorFirst to SdkTracerProviderBuilder, SdkLoggerProviderBuilder
  (#​7243)

Logs

• Add setLoggerConfigurator support to LoggerProvider
  (#​7332)

Metrics

• Add DelegatingMetricData
  (#​7229)
• Spatial aggregation for async instruments with filtering views
  (#​7264)

Exporters

• Prometheus: Add Authenticator support for PrometheusHttpServer
  (#​7225)
• OTLP: Fix OTLP metric exporter toBuilder() loosing temporality
  (#​7280)
• OTLP: Allow Otlp*MetricExporter's to publish export stats
  (#​7255)

Extensions

• Declarative config: Add support for escaping env var substitution
  (#​7033)
• Declarative config: update to opentelemetry-configuration 0.4
  (#​7064)
• Declarativeconfig: Refactor internals to add DeclarativeConfigContext
  (#​7293)

Project tooling

• Kotlin extension: Update min kotlin version to 1.8
  (#​7155)
• Add javadoc site crawler
  (#​7300,
  #​7316)

v1.49.0

Compare Source

SDK

Trace

• Avoid linear queue.size() calls in span producers by storing queue size separately
  (#​7141)

Exporters

• OTLP: Add support for setting exporter executor service
  (#​7152)
• OTLP: Refine delay jitter for exponential backoff
  (#​7206)

Extensions

• Autoconfigure: Remove support for otel.experimental.exporter.otlp.retry.enabled
  (#​7200)
• Autoconfigure: Add stable cardinality limit property otel.java.metrics.cardinality.limit
  (#​7199)
• Incubator: Add declarative config model customizer SPI
  (#​7118)

v1.48.0

Compare Source

API

• Add some helpful logging attribute methods to LogRecordBuilder
  (#​7089)

Incubator

• Introduce ConfigProvider API. Rename StructuredConfigProperties to DeclarativeConfigProperties
  and move to opentelemetry-api-incubator. Rename FileConfiguration
  to DeclarativeConfiguration.
  (#​6549)

SDK

• Log warning and adjust when BatchLogRecordProcessor, BatchSpanProcessor maxExportBatchSize
  exceeds maxQueueSize.
  (#​7045,
  #​7148)
• Fix bug causing ThrottlingLogger to log more than once per minute
  (#​7156)

Metrics

• Remove obsolete SdkMeterProviderUtil#setCardinalitylimit API
  (#​7169)

Traces

• Fix bug preventing accurate reporting of span event dropped attribute count
  (#​7142)

Exporters

• OTLP: remove support for otel.java.experimental.exporter.memory_mode
  which was previously replaced by otel.java.exporter.memory_mode
  (#​7127)
• OTLP: Extract sender parameters to config carrier class
  (incubating API)
  (#​7151)
• OTLP: Add support for setting OTLP exporter service class loader
  (#​7150)

Tooling

• Update android animalsniffer min API version to 23
  (#​7153)

v1.47.0

Compare Source

API

Incubator

• Make ExtendedTracer easier to use
  (#​6943)
• Add ExtendedLogRecordBuilder#setEventName and corresponding SDK and OTLP serialization
  (#​7012)
• BREAKING: Drop event API / SDK
  (#​7053)

SDK

• Remove -alpha artifacts from runtime classpath of stable components
  (#​6944)

Traces

• Bugfix: Follow spec on span limits, batch processors
  (#​7030)
• Add experimental SdkTracerProvider.setScopeConfigurator(ScopeConfigurator) for
  updating TracerConfig at runtime
  (#​7021)

Profiles

• Add AttributeKeyValue abstraction to common otlp exporters
  (#​7026)
• Improve profiles attribute table handling
  (#​7031)

Exporters

• Interpret timeout zero value as no limit
  (#​7023)
• Bugfix - OTLP: Fix concurrent span reusable data marshaler
  (#​7041)
• OTLP: Add ability to customize retry exception predicate
  (#​6991)
• OTLP: Expand default OkHttp sender retry exception predicate
  (#​7047,
  #​7057)

Extensions

• Autoconfigure: Consistent application of exporter customizers when otel.{signal}.exporter=none
  (#​7017)
• Autoconfigure: Promote EnvironmentResourceProvider to public API
  (#​7052)
• Autoconfigure: Ensure OTEL_PROPAGATORS still works when OTEL_SDK_DISABLED=true.
  (#​7062)%

Testing

• Add W3CBaggagePropagator to OpenTelemetryRule, OpenTelemetryExtension.
  (#​7056)

v1.46.0

Compare Source

SDK

• Remove unused dependencies, cleanup code after stabilizing Value
  (#​6948)
• Explicitly allow null into CompletableResultCode.failExceptionally()
  (#​6963)

Traces

• Fix span setStatus
  (#​6990)

Logs

• Add getters/accessors for readable fields in ReadWriteLogRecord.
  (#​6924)

Exporters

• OTLP: Update to opentelemetry-proto 1.5
  (#​6999)
• Bugfix - OTLP: Ensure Serializer runtime exceptions are rethrown as IOException
  (#​6969)
• BREAKING - OTLP: Delete experimental OTLP authenticator concept.
  See OTLP authentication docs
  for supported solutions.
  (#​6984)

Extensions

• BREAKING - Autoconfigure: Remove support for deprecated otel.experimental.resource.disabled.keys
  (#​6931)

v1.45.0

Compare Source

API

• Add convenience method setAttribute(Attribute<Long>, int) to SpanBuilder (matching the existing
  convenience method in Span)
  (#​6884)
• Extends TextMapGetter with experimental GetAll() method, implement usage in W3CBaggagePropagator
  (#​6852)

SDK

Traces

• Add synchronization to SimpleSpanProcessor to ensure thread-safe export of spans
  (#​6885)

Metrics

• Lazily initialize ReservoirCells
  (#​6851)

Logs

• Add synchronization to SimpleLogRecordProcessor to ensure thread-safe export of logs
  (#​6885)

Exporters

• OTLP: Update opentelementry-proto to 1.4
  (#​6906)
• OTLP: Rename internal Marshaler#writeJsonToGenerator method to allow jackson runtimeOnly dependency
  (#​6896)
• OTLP: Fix repeated string serialization for JSON.
  (#​6888)
• OTLP: Fix missing unsafe available check
  (#​6920)

Extensions

• Declarative config: Don't require empty objects when referencing custom components
  (#​6891)

Tooling

• Add javadoc boilerplate internal comment v2 for experimental classes
  (#​6886)
• Update develocity configuration
  (#​6903)

v1.44.1

Compare Source

SDK

Traces

• Fix regression in event attributes
  (#​6865)

v1.44.0

Compare Source

API

• Fix ConfigUtil#getString ConcurrentModificationException
  (#​6841)

SDK

Traces

• Stabilize ExceptionEventData
  (#​6795)

Metrics

• Stabilize metric cardinality limits
  (#​6794)
• Refactor metrics internals to remove MeterSharedState
  (#​6845)

Exporters

• Add memory mode option to stdout exporters
  (#​6774)
• Log a warning if OTLP endpoint port is likely incorrect given the protocol
  (#​6813)
• Fix OTLP gRPC retry mechanism for unsuccessful HTTP responses
  (#​6829)
• Add ByteBuffer field type marshaling support
  (#​6686)
• Fix stdout exporter format by adding newline after each export
  (#​6848)
• Enable reusuable_data memory mode by default for OtlpGrpc{Signal}Exporter,
  OtlpHttp{Signal}Exporter, OtlpStdout{Signal}Exporter, and PrometheusHttpServer
  (#​6799)

Extension

• Rebrand file configuration to declarative configuration in documentation
  (#​6812)
• Fix declarative config file_format validation
  (#​6786)
• Fix declarative config env substitution by disallowing '}' in default value
  (#​6793)
• Set declarative config default OTLP protocol to http/protobuf
  (#​6800)
• Stabilize autoconfigure disabling of resource keys via otel.resource.disabled.keys
  (#​6809)

Tooling

• Run tests on Java 23
  (#​6825)
• Test Windows in CI
  (#​6824)
• Add error prone checks for internal javadoc and private constructors
  (#​6844)

v1.43.0

Compare Source

API

• Add helper class to capture context using ScheduledExecutorService
  (#​6712)
• Adds Baggage.getEntry(String key)
  (#​6765)

Extensions

• Fix ottracepropagation for short span ids
  (#​6734)

SDK

Metrics

• Optimize advice with FilteredAttributes
  (#​6633)

Exporters

• Add experimental stdout log, metric, trace exporters for printing records to stdout in standard
  OTLP JSON format.
  (#​6675, #​6750)
• Add Marshalers for profiling signal type
  (#​6680)

Extensions

• Add *Model suffix to declarative config generated classes.
  (#​6721)
• Use autoconfigured ClassLoader to load declarative config
  (#​6725)
• Update declarative config to use opentelemetry-configuration v0.3.0
  (#​6733)
• Add StructuredConfigProperties#getStructured default method,
  add StructuredConfigProperties.empty()
  (#​6759)

Testing

• Add context info about wrong span or trace.
  (#​6703)

v1.42.1

Compare Source

API

• Revert java-test-fixtures plugin to remove test dependencies from pom.xml.
  (#​6695)

v1.42.0

Compare Source

API

• BREAKING: Stabilize log support for AnyValue bodies. Rename AnyValue to Value, promote
  from opentelemetry-api-incubator to opentelemetry-api, change package
  from io.opentelemetry.api.incubator.logs to io.opentelemetry.api.common.
  (#​6591)
• Noop implementations detect when opentelemetry-api-incubator is present and return extended noop
  implementations.
  (#​6617)%

SDK

Traces

• Added experimental support for SpanProcessor OnEnding callback
  (#​6367)
• Remove final modifier from SdkTracer.tracerEnabled
  (#​6687)

Exporters

• Suppress zipkin exporter instrumentation
  (#​6552)
• OTLP exporters return status code exceptions via CompletableResultCode in GrpcExporter and
  HttpExporter.
  (#​6645)
• Align GrpcSender contract with HttpSender
  (#​6658)

Extensions

• Add autoconfigure support for ns and us durations
  (#​6654)
• Add declarative configuration ComponentProvider support for resources
  (#​6625)
• Add declarative configuration ComponentProvider support for processors
  (#​6623)
• Add declarative configuration ComponentProvider support for samplers
  (#​6494)
• Add declarative configuration ComponentProvider support for propagators
  (#​6624)
• Add declarative configuration missing pieces
  (#​6677)
• Change jaeger remote sampler autoconfigure property from pollingInterval to pollingIntervalMs
  to match spec.
  (#​6672)

Testing

• Add asserts for log record body fields
  (#​6509)

apache/httpcomponents-core (org.apache.httpcomponents.core5:httpcore5)

v5.3

This is the first GA release in the 5.3 release series. This release finalizes the 5.3 APIs
and improves integration test configuration APIs along with many test code improvements.

Notable changes and features included in the 5.3 series:

• Improved conformance to RFC 9110 and RFC 9112.

• UTF-8 encoding to be used by default for text where appropriate.

• Compatibility with Java Virtual Threads and Java 21 Runtime.

• Message parsing API improvements and performance optimization.

• TLS client endpoints to make use of JSSE Endpoint Identification by default.

• Redesign of server-side request routing API.

• Redesign of TLS session handling by classic (blocking) connections.

v5.2.4

This is a maintenance release that corrects a major defect discovered since release 5.2.3 that
can lead to an H2 connection failing at runtime with the message "Frame size exceeds maximum" when
executing requests with an enclosed message body and the remote endpoint having negotiated
a maximum frame size larger than the protocol default (16KB).

v5.2.3

This is a maintenance release that corrects several defects discovered since release 5.2.2 including
a major defect that can cause non-blocking character-based consumers to enter an invalid state and
stop processing incoming data.

v5.2.2

This is a maintenance release that corrects several defects discovered since release 5.2.1 including
a major defect that can cause HTTP/2 connections allocate excessive amount of memory for their output
frame buffer if the opposite endpoint transmits a high value of MAX_FRAME_SIZE in its settings.

apache/httpcomponents-client (org.apache.httpcomponents.client5:httpclient5)

v5.5

This is the first GA release in the 5.5 release series. This release finalizes the 5.5
APIs and adds several experimental features and improvements, such as request multiplexing
over a shared HTTP/2 connection and the Classic API facade acting as a compatibility
bridge between classic I/O client services and the asynchronous message transport used
internally.

Notable changes and features included in the 5.5 series:

• Improved conformance to RFC 7616 (HTTP Digest Access Authentication).

• The connection pool implementation acts as a caching facade in front of a standard
  managed connection pool and shares already leased connections to multiplex message
  exchanges over active HTTP/2 connections. Experimental.

• Extended Auth API and improved authentication protocol logic to support mutual
  authentication.

• The Classic API facade now acts as a compatibility bridge between the classic I/O client
  services (based on the standard InputStream / OutputStream model) and the asynchronous
  message transport used internally. This is experimental.

• HTTP/2 support for the Fluent Facade (via Classic API facade). This is experimental.

Compatibility notes:

• As of this release, HttpClient does not automatically execute redirects if the original
  request manually added headers that are considered sensitive.

v5.4

This is the first GA release in the 5.4 release series. This release finalizes the 5.4 APIs,
upgrades HttpCore to version 5.3 and improves the Public Suffix matching algorithm implementation.

IMPORTANT! The new cache entry serialization format is incompatible with earlier
versions of HttpClient Cache. Persistent caches (file system based, Memcached, EhCAche
with object serialization) created with any earlier version MUST be flushed and re-populated
or the cache backend MUST be configured to use the old, deprecated cache entry serializer.

Notable changes and features included in the 5.4 series:

• Improved conformance to RFC 9110 (HTTP Semantics), RFC 7616 (HTTP Digest Access
  Authentication), RFC 2617 (’Basic’ HTTP Authentication Scheme).

• UTF-8 encoding is used by default for text where appropriate.

• Compatibility with Java Virtual Threads and Java 21 Runtime.

• Redesign and rewrite of the HTTP caching protocol layer for better efficiency
  and improved conformance to RFC 9111 (HTTP Caching).

• Cache control and context APIs.

• ETag APIs.

• TLS SNI and endpoint identification improvements.

• Support for RFC 2817 (Upgrading to TLS Within HTTP/1.1).

• Auth cache no longer makes use of Java serialization.

• Deprecation of ConnectionSocketFactory and LayeredConnectionSocketFactory.

• HttpContext optimization and performance improvement.

• Async cache is no longer considered experimental.

v5.3

This is the first GA release in the 5.3 release series. This release finalizes the 5.3 APIs
and also includes all bug fixes from the 5.2 release branch.

The 5.3 release series introduces support for the Bearer authentication scheme (RFC 6750) and
deprecates NTLM and GSS-based experimental authentication schemes in favor of Basic / Bearer
authentication with TLS.

Notable changes and features included in the 5.3 series:

• Introduction of the Bearer authentication scheme.

• Deprecation of the NTLM authentication scheme.

• Deprecation of the GSS-based experimental authentication schemes.

• Support for load distribution across multiple proxies.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 39.46%. Comparing base (66a205a) to head (f3d7915).
Report is 5 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff              @@
##             master      #51      +/-   ##
============================================
+ Coverage     38.91%   39.46%   +0.55%     
- Complexity      405      414       +9     
============================================
  Files           115      116       +1     
  Lines          2405     2488      +83     
  Branches        243      249       +6     
============================================
+ Hits            936      982      +46     
- Misses         1374     1408      +34     
- Partials         95       98       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.