dependabot[bot] opened a new pull request, #3927: URL: https://github.com/apache/causeway/pull/3927
Bumps [io.opentelemetry.contrib:opentelemetry-maven-extension](https://github.com/open-telemetry/opentelemetry-java-contrib) from 1.61.0-alpha to 1.62.0-alpha. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-java-contrib/releases";>io.opentelemetry.contrib:opentelemetry-maven-extension's releases</a>.</em></p> <blockquote> <h2>Version 1.61.0</h2> <p>This release targets the OpenTelemetry Java Instrumentation <a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.32.0";>2.32.0</a>.</p> <h3>:warning: Breaking changes</h3> <ul> <li>Dynamic control: the <code>trace-sampling</code> policy type now takes a percentage (<code>0.0</code>–<code>100.0</code>) instead of a ratio. Ratio-based configurations must switch to the new <code>sampling-rate</code> policy type, keeping the same values (e.g. <code>policyType: trace-sampling</code> with <code>0.5</code> becomes <code>policyType: sampling-rate</code> with <code>0.5</code>). Unmigrated ratio values are now read as percentages, so <code>0.5</code> would mean 0.5% instead of 50%. Full JSON policies now use <code>keep.ratio</code> or <code>keep.percentage</code> instead of <code>keep.probability</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3097";>#3097</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3100";>#3100</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3102";>#3102</a>, <a href="https://redirect.github.com/open-telemetry/opentele metry-java-contrib/pull/3111">#3111</a>)</li> </ul> <h3>AWS resources</h3> <ul> <li>Set <code>aws.ecs.task.id</code> on the ECS resource, extracted from the task ARN as the semantic conventions require. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3098";>#3098</a>)</li> </ul> <h3>Azure resources</h3> <ul> <li>Add <code>cloud.account.id</code> and <code>azure.resource_group.name</code> to the Azure App Service and Azure Functions resource detectors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3074";>#3074</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3092";>#3092</a>)</li> </ul> <h3>Disk buffering</h3> <ul> <li>Add <code>DiscardedFileListener</code>, set with <code>FileStorageConfiguration.Builder.setDiscardedFileListener</code>, to be notified when a stored file is deleted before all of its data was read: expired, removed to stay within the folder size limit, or corrupted. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3144";>#3144</a>)</li> </ul> <h3>Dynamic control</h3> <ul> <li>Accept full telemetry policy objects, as defined by the current spec, in <code>jsonkeyvalue</code> sources. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3037";>#3037</a>)</li> <li>Add an <code>http</code> policy source that polls a URL for policy updates. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3040";>#3040</a>)</li> <li>Add the <code>trace-sampling</code> percentage policy type alongside the <code>sampling-rate</code> ratio policy type. Configuring both at once is rejected. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3100";>#3100</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3113";>#3113</a>)</li> <li>Rename <code>TraceSamplingRatePolicyImplementer</code> to <code>TraceSamplingPolicyImplementer</code>, and replace <code>TraceSamplingValidator</code> with <code>TraceSamplingRateValidator</code> and <code>TraceSamplingPercentageValidator</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3076";>#3076</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3102";>#3102</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3122";>#3122</a>)</li> <li>With declarative configuration, OpAMP now takes <code>service.name</code> and <code>deployment.environment.name</code> from the resolved SDK resource. <code>OTEL_SERVICE_NAME</code> and <code>OTEL_RESOURCE_ATTRIBUTES</code> no longer override it on that path. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3013";>#3013</a>)</li> </ul> <h3>GCP authentication extension</h3> <ul> <li>Add support for the <code>logs</code> signal type, enabling authenticated OTLP log record exports. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3121";>#3121</a>)</li> </ul> <h3>JMX scraper</h3> <ul> <li>Target systems backed by instrumentation metric definitions now use the plain name, e.g. <code>cassandra</code> and <code>kafka-connect</code>. The <code>experimental-</code> prefix (e.g. <code>experimental-kafka-connect</code>) is deprecated and logs a warning. With the default <code>otel.jmx.target.source=auto</code>, <code>cassandra</code> now uses the instrumentation definitions instead of the legacy ones; set <code>otel.jmx.target.source=legacy</code> to keep the previous metrics. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3091";>#3091</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3135";>#3135</a>)</li> </ul> <h3>Kafka exporter</h3> <ul> <li>Pin <code>zstd-jni</code> to 1.5.7-20 to pick up security fixes not yet in the <code>kafka-clients</code> dependency. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3127";>#3127</a>)</li> </ul> <h3>Samplers</h3> <ul> <li><code>RuleBasedRoutingSampler</code> can now match on non-string attributes (e.g. numbers), which are converted to strings before the pattern is applied. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3073";>#3073</a>)</li> </ul> <h3>🙇 Thank you</h3> <p>This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:</p> <p><a href="https://github.com/AlexDeAg";><code>@AlexDeAg</code></a> <a href="https://github.com/cdsap";><code>@cdsap</code></a> <a href="https://github.com/jack-berg";><code>@jack-berg</code></a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-java-contrib/blob/main/CHANGELOG.md";>io.opentelemetry.contrib:opentelemetry-maven-extension's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>Unreleased</h2> <h2>Version 1.62.1 (2026-11-06)</h2> <h3>🛠️ Bug fixes</h3> <ul> <li>Fix <code>NoSuchMethodError</code> when extracting AWS X-Ray context with OpenTelemetry SDK 1.68.0. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3208";>#3208</a>)</li> </ul> <h2>Version 1.62.0 (2026-11-04)</h2> <h3>AWS Lambda resource detector</h3> <ul> <li>Read <code>cloud.account.id</code> from symlink created by the OTel Lambda Extension. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/2619";>#2619</a>)</li> </ul> <h3>Common Expression Language sampler</h3> <ul> <li>Require a patched Guava version to avoid a known vulnerability. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3166";>#3166</a>)</li> </ul> <h3>Disk buffering</h3> <ul> <li>Ignore removal of a buffered item after its file has been closed. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3172";>#3172</a>)</li> </ul> <h3>Kafka exporter</h3> <ul> <li>Override the vulnerable Snappy dependency pulled in by <code>kafka-clients</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3180";>#3180</a>)</li> </ul> <h3>OpAMP client</h3> <ul> <li>Reconnect after the server closes the WebSocket. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3192";>#3192</a>)</li> <li>Send a status report whenever a new WebSocket connection is established, even when there are no pending state changes. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3195";>#3195</a>)</li> <li>Include <code>ReportsStatus</code> in the default capabilities. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3189";>#3189</a>)</li> <li>Send the agent disconnect message when the HTTP client shuts down. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-contrib/pull/3194";>#3194</a>)</li> </ul> <h2>Version 1.61.0 (2026-10-09)</h2> <h3>:warning: Breaking changes</h3> <ul> <li>Dynamic control: the <code>trace-sampling</code> policy type now takes a percentage (<code>0.0</code>–<code>100.0</code>) instead</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/open-telemetry/opentelemetry-java-contrib/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
