Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

build: bump org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.1 #3926

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 30, 2024

Bumps org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.1.

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v3.4.1

🐞 Bug Fixes

  • KafkaProperties fail to build SSL properties when the bundle name is an empty string #43563
  • Diagnostics are poor when property resolution throws a ConversionFailedException #43559
  • SpringApplicationShutdownHandlers do not run in deterministic order #43536
  • Unable to find a @SpringBootConfiguration results in misleading error message #43507
  • With multiple ResourceHandlerRegistrationCustomizer beans in the context, only one of them is used #43497
  • Unable to use Docker Compose support when mixing dedicated and shared services #43472
  • Kafka dependency management does not include the kafka-server module #43454
  • Docker API version is incorrectly reported when '/_ping` calls fail and version should be fixed #43452
  • Methods to build producer / consumer properties from KafkaProperties are inconvienenent to use without an SSL bundle #43448
  • Failures in -Djarmode=tools do not consistently return a non-zero exit #43436
  • HttpComponentsClientHttpRequestFactoryBuilder replaces the existing defaultRequestConfigCustomizer rather than adding to it #43429
  • spring-boot-maven-plugin sets imagePlatform even if it's empty #43424
  • OnBeanCondition fails to match on annotations when using Scoped Proxies #43423
  • Failure analysis for InvalidConfigurationPropertyValueException doesn't correctly handle fuzzy matching of environment variables #43382
  • H2ConsoleAutoConfiguration causes early initialization of DataSource beans #43359
  • Accept progress on numbers >2GB #43356
  • Servlet-based UserDetailsServiceAutoConfiguration is active in a reactive app #43334
  • StructuredLoggingJsonMembersCustomizer implementations declared in spring.factories with a generic type more specific than Object are not called #43312
  • Overriding log level with an environment variable does not work when using an environment prefix #43307
  • Management endpoint access and enabled properties are ignored unless the endpoint ID is an exact match #43302
  • UnsupportedOperationException when starting a Maven shaded application on Java 21 with virtual threads enabled #43291
  • JmsListener failing with Narayana (pooled ConnectionFactory) since 3.4.0 #43277
  • SslBundle can no longer open store file locations without using a 'file:' prefix #43274
  • TestRestTemplate does not allow redirects to be customized #43258
  • Testcontainers start() methods may be started multiple times #43253

📔 Documentation

  • Fix typo in documentation #43558
  • Document that server.ssl.cipher and server.ssl.enabled-protocols are not fallbacks used with SSL bundles #43552
  • Use <annotationProcessorPaths> in Maven examples for configuring an annotation processor #43544
  • Fix typo #43519
  • Links to logback javadoc are incorrect #43456
  • Fix JUnit javadoc links #43428
  • Reference documentation incorrectly uses 'disabled' rather than 'none' for access restrictions #43351
  • Restore System property in Logging section of the reference documentation #43342
  • Fix link to proxyBeanMethods in @AutoConfiguration javadoc #43325
  • Fix links to Servlet and JPA javadoc #43324
  • Link to @EnableMethodSecurity instead of the deprecated @EnableGlobalMethodSecurity #43315
  • Document that StructuredLoggingJsonMembersCustomizer implementations may optionally take constructor parameters #43314
  • Update javadoc of StructuredLoggingJsonMembersCustomizer to note that implementations can registered through spring.factories #43313
  • Fix Javadoc link for Hikari #43311
  • Document how to use structured logging with custom log configuration #43301
  • Update Javadoc since for OtlpMetricsProperties and OtlpTracingProperties #43249

🔨 Dependency Upgrades

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.16 to 3.4.1.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.16...v3.4.1)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 30, 2024
@dependabot dependabot bot requested a review from a team December 30, 2024 17:49
@jackshirazi
Copy link
Contributor

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 31, 2024

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jackshirazi
Copy link
Contributor

this appears to be a real regression break, presumably from spring changing something internal that we rely on

@@ -133,7 +133,7 @@ private void hello(boolean expectHeaders) {

assertThat(headersCount)
.describedAs("unexpected headers count")
.isEqualTo(6);
.isGreaterThanOrEqualTo(6);
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[for reviewer] there is now 7 headers when only 6 were previously reported, here we don't really have a strict assertion on all of them, only a few are expected with specific values as seen in the assertions just below.

jackshirazi
jackshirazi previously approved these changes Jan 16, 2025
@@ -473,7 +469,8 @@ static TransactionImpl checkTransaction(TransactionImpl transaction, String expe
.isEqualTo("Spring Webflux");

assertThat(transaction.getFrameworkVersion())
.isEqualTo(expectedFrameworkVersion);
.isNotBlank()
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#3936 added hard-coded versions to the tests, which would bite us on every version bump. With this change we still check for the version, but use spring itself to get the expected value.

@JonasKunz JonasKunz requested a review from SylvainJuge January 21, 2025 14:53
@JonasKunz JonasKunz merged commit 03e60d1 into main Jan 21, 2025
13 checks passed
@JonasKunz JonasKunz deleted the dependabot/maven/org.springframework.boot-spring-boot-dependencies-3.4.1 branch January 21, 2025 15:43
jackshirazi added a commit that referenced this pull request Feb 27, 2025
* post release: elastic-apm-agent v1.52.1 (#3875)

Co-authored-by: obltmachine <obltmachine@users.noreply.github.com>

* build: bump com.networknt:json-schema-validator from 1.5.2 to 1.5.3 (#3879)

Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 1.5.2 to 1.5.3.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.2...1.5.3)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: configure gh cli for the major update release step (#3876)

* Prevent NPE when using otel metrics bridge asynchronously to agent start (#3880)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 973e72c (#3871)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.testcontainers from 1.20.1 to 1.20.3 (#3868)

Bumps `version.testcontainers` from 1.20.1 to 1.20.3.

Updates `org.testcontainers:testcontainers-bom` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.3)

Updates `org.testcontainers:testcontainers` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.3)

---
updated-dependencies:
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.testcontainers:testcontainers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [DOCS] Clarify the frequency of config polling (#3799) (#3881)

---------

Co-authored-by: Luca Belluccini <luca.belluccini@elastic.co>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 55b297d (#3882)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance from 1.4.3 to 1.4.4 in the github-actions group (#3866)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).
Updates `actions/attest-build-provenance` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@1c608d1...ef24412)

* deps(updatecli): bump all policies (#3886)

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-data-spec" Updatecli version policy

Made with ❤️️ by updatecli

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-gherkin" Updatecli version policy

Made with ❤️️ by updatecli

* chore: deps(updatecli/policy): bump "ghcr.io/elastic/oblt-updatecli-p...

... olicies/apm/apm-json-specs" Updatecli version policy

Made with ❤️️ by updatecli

---------

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* build: bump version.log4j from 2.12.4 to 2.24.2 (#3885)

* build: bump version.log4j from 2.12.4 to 2.24.2

Bumps `version.log4j` from 2.12.4 to 2.24.2.

Updates `org.apache.logging.log4j:log4j-core` from 2.12.4 to 2.24.2

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.12.4 to 2.24.2

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* revert

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <jack.shirazi@elastic.co>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 32f06b1 (#3887)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* Revert "deps(updatecli): bump all policies" (#3888)

This reverts commit b21eeaf.

* github-actions: use v1 for the oblt-actions (#3890)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to ad2e15a (#3893)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* Set context CL for reliable weblogic connection (#3870)

* set context CL for weblogic

* deps(updatecli): bump all policies (#3894)

* build: bump io.micrometer:micrometer-core from 1.13.6 to 1.14.1 (#3899)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.13.6 to 1.14.1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.13.6...v1.14.1)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.aws.sdk from 2.29.5 to 2.29.23 in /apm-agent-plugins (#3896)

Bumps `version.aws.sdk` from 2.29.5 to 2.29.23.

Updates `software.amazon.awssdk:s3` from 2.29.5 to 2.29.23

Updates `software.amazon.awssdk:sqs` from 2.29.5 to 2.29.23

Updates `software.amazon.awssdk:dynamodb` from 2.29.5 to 2.29.23

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: use tool-versions file (#3901)

* ci: remove elastic-observability-automation from the triage (#3897)

* build: bump org.apache.logging.log4j:log4j-bom from 2.24.1 to 2.24.2 (#3909)

Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.24.1 to 2.24.2.
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.24.1...rel/2.24.2)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance in the github-actions group (#3907)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 1.4.4 to 2.0.1
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@ef24412...c4fbc64)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3895)

Bumps `version.aws.sdk` from 1.12.777 to 1.12.779.

Updates `com.amazonaws:aws-java-sdk-s3` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

Updates `com.amazonaws:aws-java-sdk-dynamodb` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

Updates `com.amazonaws:aws-java-sdk-sqs` from 1.12.777 to 1.12.779
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.777...1.12.779)

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.0 (#3898)

* build: bump org.springframework.boot:spring-boot-dependencies

Bumps [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.16 to 3.4.0.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.16...v3.4.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Add explicit okhttp dependency version

* Prevent recursion when logging recursive advice bootstrapping

* Support unwrapping webflux requests

* Remove tests for TRACE option as it seems to be blocked by spring

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <jack.shirazi@elastic.co>
Co-authored-by: Jonas Kunz <jonas.kunz@elastic.co>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 1b51ff6 (#3910)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* OS/400 avoids using NOFOLLOW_LINKS (#3905)

* OS/400 avoids using NOFOLLOW_LINKS

* Add changelog entry for os-400-no-follow-links

* build: bump io.micrometer:micrometer-core from 1.14.1 to 1.14.2 (#3915)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.1...v1.14.2)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.byte-buddy from 1.15.10 to 1.15.11 (#3914)

* build: bump version.byte-buddy from 1.15.10 to 1.15.11

Bumps `version.byte-buddy` from 1.15.10 to 1.15.11.

Updates `net.bytebuddy:byte-buddy` from 1.15.10 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.10...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-agent` from 1.9.16 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.9.16...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-dep` from 1.15.10 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.10...byte-buddy-1.15.11)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-dep
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update pom.xml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jonas Kunz <jonas.kunz@elastic.co>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to bfdeddb (#3916)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump actions/attest-build-provenance in the github-actions group (#3912)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@c4fbc64...7668571)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 3a6e913 (#3919)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore: APM agent json server schema 560cc4b604ede25ec70afd09f213d892f... (#3918)

... 30ceedc

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* build: bump org.assertj:assertj-core from 3.26.3 to 3.27.0 (#3922)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.26.3 to 3.27.0.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.3...assertj-build-3.27.0)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.91.0 (#3924)

* build: bump io.opentelemetry.semconv:opentelemetry-semconv (#3925)

Bumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.28.0-alpha to 1.29.0-alpha.
- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)
- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/semantic-conventions-java/commits)

---
updated-dependencies:
- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to eef54b3 (#3927)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3929)

Bumps `version.aws.sdk` from 2.29.23 to 2.29.43.

Updates `software.amazon.awssdk:s3` from 2.29.23 to 2.29.43

Updates `software.amazon.awssdk:sqs` from 2.29.23 to 2.29.43

Updates `software.amazon.awssdk:dynamodb` from 2.29.23 to 2.29.43

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.log4j from 2.12.4 to 2.24.3 (#3921)

* build: bump version.log4j from 2.12.4 to 2.24.3

Bumps `version.log4j` from 2.12.4 to 2.24.3.

Updates `org.apache.logging.log4j:log4j-core` from 2.12.4 to 2.24.3

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.12.4 to 2.24.3

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* revert old version

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jackshirazi <jack.shirazi@elastic.co>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 2503e99 (#3930)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3928)

Bumps `version.aws.sdk` from 1.12.779 to 1.12.780.

Updates `com.amazonaws:aws-java-sdk-s3` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

Updates `com.amazonaws:aws-java-sdk-dynamodb` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

Updates `com.amazonaws:aws-java-sdk-sqs` from 1.12.779 to 1.12.780
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.779...1.12.780)

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.amazonaws:aws-java-sdk-sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump version.mockito from 5.14.2 to 5.15.2 (#3934)

Bumps `version.mockito` from 5.14.2 to 5.15.2.

Updates `org.mockito:mockito-core` from 5.14.2 to 5.15.2
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.14.2...v5.15.2)

Updates `org.mockito:mockito-subclass` from 5.14.2 to 5.15.2
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.14.2...v5.15.2)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-subclass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add framework info for Spring Webflux (#3936)

* Add framework info for Spring Webflux transactions

* Update changelog

* Fix failing Spring 6 tests

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to f2813ac (#3932)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.92.0 (#3937)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to dd66bee (#3941)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* github-actions: ubuntu-20.04 will be fully retired by April 1, 2025 (#3945)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to ea157dd (#3944)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump org.assertj:assertj-core from 3.27.0 to 3.27.2 (#3938)

* build: bump org.assertj:assertj-core from 3.27.0 to 3.27.2

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.0 to 3.27.2.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.0...assertj-build-3.27.2)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix missing header

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <763082+SylvainJuge@users.noreply.github.com>

* build: bump org.springframework.boot:spring-boot-dependencies from 2.7.16 to 3.4.1 (#3926)

* Fix inferred spans logging config option docs (#3948)

* remove obsolete tomcat docker image (#3940)

* Investigate incorrect CI failure reporting (#3952)

* build: bump actions/attest-build-provenance in the github-actions group (#3955)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@7668571...520d128)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to bd40170 (#3951)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump org.springframework.boot:spring-boot-maven-plugin (#3958)

Bumps [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) from 3.3.0 to 3.4.2.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.0...v3.4.2)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add spring boot 3 tests for rabbitMQ / AMQP spring instrumentation (#3961)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 30fd211 (#3962)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 8df3ca6 (#3963)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump version.aws.sdk in /apm-agent-plugins (#3965)

Bumps `version.aws.sdk` from 2.29.43 to 2.30.11.

Updates `software.amazon.awssdk:s3` from 2.29.43 to 2.30.11

Updates `software.amazon.awssdk:sqs` from 2.29.43 to 2.30.11

Updates `software.amazon.awssdk:dynamodb` from 2.29.43 to 2.30.11

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:sqs
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.93.0 (#3964)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* github-action: Add AsciiDoc freeze warning (#3959)

* fix

* github-action: Add AsciiDoc freeze warning

* github-action: Add AsciiDoc freeze warning

* Update .github/workflows/release-step-3.yml

* build: bump version.byte-buddy from 1.15.11 to 1.17.0 (#3967)

* build: bump version.byte-buddy from 1.15.11 to 1.17.0

Bumps `version.byte-buddy` from 1.15.11 to 1.17.0.

Updates `net.bytebuddy:byte-buddy` from 1.15.11 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.11...byte-buddy-1.17.0)

Updates `net.bytebuddy:byte-buddy-agent` from 1.9.16 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.9.16...byte-buddy-1.17.0)

Updates `net.bytebuddy:byte-buddy-dep` from 1.15.11 to 1.17.0
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.11...byte-buddy-1.17.0)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-dep
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* restore old version

* update shade + force asm version

* add new dependency to agent packages

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <763082+SylvainJuge@users.noreply.github.com>

* fix minor build warnings (#3968)

* remove duplicated dependency

* remove duplicated jar plugin

* build: bump io.micrometer:micrometer-core from 1.14.2 to 1.14.3 (#3971)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.2 to 1.14.3.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.2...v1.14.3)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump com.networknt:json-schema-validator from 1.5.3 to 1.5.5 (#3970)

Bumps [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) from 1.5.3 to 1.5.5.
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.3...1.5.5)

---
updated-dependencies:
- dependency-name: com.networknt:json-schema-validator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.93.1 (#3969)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* upgrade java8 log4j to latest release (#3972)

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to d74b1fd (#3973)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* build: bump io.micrometer:micrometer-core from 1.14.3 to 1.14.4 (#3976)

Bumps [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) from 1.14.3 to 1.14.4.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.14.3...v1.14.4)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump io.opentelemetry.semconv:opentelemetry-semconv from 1.29.0-alpha to 1.30.0-rc.1 (#3966)

* build: bump io.opentelemetry.semconv:opentelemetry-semconv

Bumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.29.0-alpha to 1.30.0-rc.1.
- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)
- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/semantic-conventions-java/commits/v1.30.0-rc.1)

---
updated-dependencies:
- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* remove usage of now stale semconv attributes

* remove semconv dependency

* code cleanup

* remove leftovers references

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sylvain Juge <763082+SylvainJuge@users.noreply.github.com>

* chore: deps(updatecli): Bump updatecli version to v0.94.1 (#3978)

Made with ❤️️ by updatecli

Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>

* chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 0801a43 (#3979)

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

* pre release: elastic-apm-agent v1.52.2 (#3983)

Co-authored-by: obltmachine <obltmachine@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: elastic-observability-automation[bot] <180520183+elastic-observability-automation[bot]@users.noreply.github.com>
Co-authored-by: obltmachine <obltmachine@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Victor Martinez <victormartinezrubio@gmail.com>
Co-authored-by: Jonas Kunz <jonas.kunz@elastic.co>
Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Co-authored-by: Luca Belluccini <luca.belluccini@elastic.co>
Co-authored-by: jackshirazi <jack.shirazi@elastic.co>
Co-authored-by: SylvainJuge <763082+SylvainJuge@users.noreply.github.com>
Co-authored-by: César <56847527+LikeTheSalad@users.noreply.github.com>
Co-authored-by: Renette Ros <supergirl0894+git@gmail.com>
Co-authored-by: Jan Calanog <jan.calanog@elastic.co>
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
agent-java dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants