Skip to content

chore(deps): bump the maven group across 2 directories with 3 updates#79

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/tarantool-java-sdk-bom/maven-5fb1fbf1c5
Open

chore(deps): bump the maven group across 2 directories with 3 updates#79
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/tarantool-java-sdk-bom/maven-5fb1fbf1c5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps the maven group with 2 updates in the /tarantool-java-sdk-bom directory: org.jsonschema2pojo:jsonschema2pojo-core and io.opentelemetry:opentelemetry-api.
Bumps the maven group with 1 update in the /tarantool-spring-data directory: org.springframework.boot:spring-boot.

Updates org.jsonschema2pojo:jsonschema2pojo-core from 1.2.2 to 1.3.0

Release notes

Sourced from org.jsonschema2pojo:jsonschema2pojo-core's releases.

1.3.0

  • Migrate publishing from legacy OSSRH to Maven Central Portal (#1747)
  • Remove Ant task (no longer supported) (#1743)
  • Require JDK 17 (#1741)
  • Add Jackson 3 annotation support (#1740)
  • Prevent StackOverflowError when root is self-referencing (#1679)
  • Fix 'AbstractCompile.destinationDir property has been deprecated' error when using Gradle 8 (#1646)
  • Fix problems with remote URL (e.g. http) when using Maven Plugin (#1614)
  • Fix generics class warning when using generated base builder class (#1587)
  • Allow URL(s) as source in jsonschema2pojo-gradle-plugin (#1554)
Changelog

Sourced from org.jsonschema2pojo:jsonschema2pojo-core's changelog.

1.3.0

  • Migrate publishing from legacy OSSRH to Maven Central Portal (#1747)
  • Remove Ant task (no longer supported) (#1743)
  • Require JDK 17 (#1741)
  • Add Jackson 3 annotation support (#1740)
  • Prevent StackOverflowError when root is self-referencing (#1679)
  • Fix 'AbstractCompile.destinationDir property has been deprecated' error when using Gradle 8 (#1646)
  • Fix problems with remote URL (e.g. http) when using Maven Plugin (#1614)
  • Fix generics class warning when using generated base builder class (#1587)
  • Allow URL(s) as source in jsonschema2pojo-gradle-plugin (#1554)
Commits
  • 88ac6be [maven-release-plugin] prepare release jsonschema2pojo-1.3.0
  • 24e8655 Configure releaseProfiles for maven-release-plugin
  • 938dfe2 Merge pull request #1740 from diegogranados/jackson3_annotator
  • ad07174 Initial Jackson-3 annotator support
  • 4f94474 Merge pull request #1750 from joelittlejohn/optimize-integration-tests
  • 9027ccb Parallelise IT tests to reduce build time
  • 88d0f27 Safely reuse compiler and filemanager to speed up IT tests
  • 63b0967 Merge pull request #1747 from joelittlejohn/maven-central-portal
  • 5cf82a8 Migrate publishing from OSSRH to Maven Central Portal
  • 762d784 Merge pull request #1743 from unkish/issues/ant_plugin_removal
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.62.0

API

Context

  • Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

  • Avoid parentContext allocation on span start for the common case (#8332)

Metrics

  • Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
  • Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

  • BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
  • BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
  • OTLP: Fix null input handling in StringEncoder (#8312)
  • OTLP: Align proto field types and wire tag names in marshalers (#8293)
  • OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
  • OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
  • OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
  • OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

  • BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
  • Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)
  • Declarative config: Fix collection fields to not be initialized to empty by default (#8356)
  • Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

  • Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)
  • Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)
  • Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

  • Add initial OSGi support (#7964)
  • Promote ApiUsageLogger to opentelemetry-common public API (#8318)
  • Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)
  • Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)
  • Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.62.0 (2026-05-08)

API

Context

  • Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

  • Avoid parentContext allocation on span start for the common case (#8332)

Metrics

  • Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
  • Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

  • BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
  • BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
  • OTLP: Fix null input handling in StringEncoder (#8312)
  • OTLP: Align proto field types and wire tag names in marshalers (#8293)
  • OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
  • OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
  • OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
  • OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

  • BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
  • Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits
  • d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
  • 3a62b7a Prepare 1.62.0 (#8378)
  • 893910b docs: Expand SIG meeting welcoming language (#8383)
  • 03837d3 Apply baggage limits (#8380)
  • cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
  • 8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
  • 2923430 Add initial OSGi support (#7964)
  • 3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
  • e224e19 Port event span event bridge from contrib (#8372)
  • b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot from 2.7.18 to 3.0.0

Commits
  • c9c359f Release v3.0.0
  • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
  • 355b428 Merge branch '2.7.x'
  • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
  • 1de09f4 Merge branch '2.6.x' into 2.7.x
  • e922650 Upgrade to Spring Framework 6.0.2
  • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
  • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
  • d4a9100 Next development version (v2.6.15-SNAPSHOT)
  • 28cb225 Merge branch '2.7.x'
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the maven group with 2 updates in the /tarantool-java-sdk-bom directory: [org.jsonschema2pojo:jsonschema2pojo-core](https://github.com/joelittlejohn/jsonschema2pojo) and [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java).
Bumps the maven group with 1 update in the /tarantool-spring-data directory: [org.springframework.boot:spring-boot](https://github.com/spring-projects/spring-boot).


Updates `org.jsonschema2pojo:jsonschema2pojo-core` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/joelittlejohn/jsonschema2pojo/releases)
- [Changelog](https://github.com/joelittlejohn/jsonschema2pojo/blob/master/CHANGELOG.md)
- [Commits](joelittlejohn/jsonschema2pojo@jsonschema2pojo-1.2.2...jsonschema2pojo-1.3.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.61.0...v1.62.0)

Updates `org.springframework.boot:spring-boot` from 2.7.18 to 3.0.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.18...v3.0.0)

---
updated-dependencies:
- dependency-name: org.jsonschema2pojo:jsonschema2pojo-core
  dependency-version: 1.3.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.62.0
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.springframework.boot:spring-boot
  dependency-version: 3.0.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants