dependabot[bot] opened a new pull request, #19811: URL: https://github.com/apache/pinot/pull/19811
Bumps [io.prometheus.jmx:collector](https://github.com/prometheus/jmx_exporter) from 1.6.0 to 1.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/jmx_exporter/releases";>io.prometheus.jmx:collector's releases</a>.</em></p> <blockquote> <h2>1.7.0 / 2026-10-05</h2> <h1>JMX Exporter 1.7.0</h1> <h2>Features</h2> <ul> <li><strong>SSL PEM support:</strong> The exporter HTTP server can now use PEM-encoded certificate/private key files instead of a Java keystore. Both <code>httpServer.ssl.pem.certificate.filename</code> and <code>httpServer.ssl.pem.privateKey.filename</code> are supported, including encrypted private keys (with an optional <code>password</code> that supports <code>${ENV_VAR}</code> resolution) and unencrypted/encrypted PKCS8, traditional RSA, and traditional EC key formats. PEM mode is mutually exclusive with <code>httpServer.ssl.keyStore</code>, and certificate material continues to be reloaded hourly.</li> <li><strong>Configurable Java agent logging backend:</strong> The Java agent (and isolator agent) can now use a JUL-independent logging backend that writes <code>INFO</code>, <code>WARN</code>, and <code>ERROR</code> messages to standard error. Select it with <code>-Djmx.prometheus.exporter.logging.backend=native</code> or the <code>JMX_PROMETHEUS_EXPORTER_LOGGING_BACKEND=native</code> environment variable. Supported values are <code>native</code> and <code>jul</code> (the default), and the system property takes precedence over the environment variable.</li> <li><strong>Performance optimizations:</strong> Collector scraping, rule matching/caching, configuration loading, credential caching, and map/string handling were tuned, and JMH benchmark modules and helper scripts were added (<code>collector-benchmarks</code>, <code>jmx_prometheus_common-benchmarks</code>, <code>jmx_prometheus_javaagent-benchmarks</code>) to track them.</li> <li><strong>Reference material:</strong> The website documentation was restructured and a <code>1.7.0</code> versioned documentation set was added.</li> </ul> <h2>Fixed</h2> <ul> <li>The JVM no longer hangs on exit when <code>httpServer.ssl</code> is configured; the shared scheduled executor used for the hourly SSL certificate reload (and for <code>maximumRequestSeconds</code>) now uses daemon threads like the rest of the project.</li> <li>Fixed credential caching: valid credentials are now looked up in the cache before the potentially expensive password verification, and invalid credentials are never cached.</li> <li>Fixed configuration precedence.</li> <li>Fixed security edge cases in the HTTP server.</li> <li>Fixed a <code>NullPointerException</code> when an MBean reports an attribute that is not present in its <code>MBeanInfo</code> (the attribute is now skipped).</li> <li>Fixed jar shading for the Java agent and isolator java agent.</li> <li>The isolator class loader no longer fails on JDK 8 when a package is already defined by an ancestor classloader.</li> <li>Reverted Caffeine to a version that maintains Java 8 compatibility.</li> <li>Fixed Javadoc.</li> <li>Fixed <code>release.sh</code> to correctly omit the <code>v</code> prefix from the release tag.</li> <li>Fixed the developer test scripts.</li> <li>Fixed integration test golden files to ignore the release version.</li> </ul> <h2>Changes</h2> <ul> <li>Removed the Bouncy Castle library dependency.</li> <li>Implemented a BOM and reworked the build/release tooling (artifact packaging and SBOM handling).</li> <li>Added JMH benchmark modules for the collector, shared support, and Java agent.</li> <li>Refactored the integration test suite and added integration test framework helpers.</li> <li>Added and updated Docker test images.</li> <li>Decreased integration test output and improved test coverage.</li> <li>Updated documentation and added <code>1.7.0</code> versioned documentation.</li> <li>Multiple dependency updates.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/BZValoche";><code>@BZValoche</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/jmx_exporter/pull/1529";>prometheus/jmx_exporter#1529</a></li> <li><a href="https://github.com/arnab";><code>@arnab</code></a>_nandy7 made their first contribution in <a href="https://redirect.github.com/prometheus/jmx_exporter/pull/1528";>prometheus/jmx_exporter#1528</a></li> <li><a href="https://github.com/Abaidullah889";><code>@Abaidullah889</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/jmx_exporter/pull/1601";>prometheus/jmx_exporter#1601</a></li> </ul> <p><strong>Full Changelog</strong></p> <p><a href="https://github.com/prometheus/jmx_exporter/compare/1.6.0...1.7.0";>https://github.com/prometheus/jmx_exporter/compare/1.6.0...1.7.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/jmx_exporter/commit/dc8a5741dc449e7a8a98bc153d702c456cf7b5f7";><code>dc8a574</code></a> Release 1.7.0</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/97c14795ebdabf6bbaf78cc88da8223972e92413";><code>97c1479</code></a> fix: Fixed integration tests (<a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1612";>#1612</a>)</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/171b388b4acd8c657d47b84fbdb40fd3011cdcba";><code>171b388</code></a> chore: Updated documentation (<a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1611";>#1611</a>)</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/f66e39402d797a93ecb35898b2510f5274883579";><code>f66e394</code></a> chore: AI files (<a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1610";>#1610</a>)</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/8908da91cd19f353a431f6d68c5ec707446adf98";><code>8908da9</code></a> fix(deps): update maven dependencies (<a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1609";>#1609</a>)</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/327f23203224cca98e0f72cbee2ba4deb697766e";><code>327f232</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1608";>#1608</a> from prometheus/dependabot/npm_and_yarn/website/fast...</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/be0875c2348fe4095617bcbf0e1b2f315c522b4e";><code>be0875c</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1607";>#1607</a> from prometheus/dependabot/npm_and_yarn/website/seri...</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/4a92ae06300bec2ae654419ecb4579dd1075e598";><code>4a92ae0</code></a> chore(deps): bump brace-expansion from 5.0.9 to 5.0.12 in /website (<a href="https://redirect.github.com/prometheus/jmx_exporter/issues/1606";>#1606</a>)</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/81e4fd1d56983f00fae7c7d3aeacf441115b2da3";><code>81e4fd1</code></a> chore(deps): bump fast-uri from 3.1.7 to 3.1.8 in /website</li> <li><a href="https://github.com/prometheus/jmx_exporter/commit/14d7e97c9a2266f54299ec14277adf6c7fe62036";><code>14d7e97</code></a> chore(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /website</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/jmx_exporter/compare/1.6.0...1.7.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
