Update all non-major maven dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.httpcomponents.client5:httpclient5 (source)	5.5.1 → 5.6
org.apache.httpcomponents.core5:httpcore5 (source)	5.2.1 → 5.4
org.apache.httpcomponents.core5:httpcore5 (source)	5.3.6 → 5.4
org.apache.httpcomponents.client5:httpclient5 (source)	5.2.1 → 5.6
org.apache.commons:commons-pool2 (source)	2.12.1 → 2.13.1
io.opentelemetry:opentelemetry-exporter-otlp	1.49.0 → 1.58.0
io.opentelemetry:opentelemetry-sdk	1.49.0 → 1.58.0
io.opentelemetry:opentelemetry-api	1.49.0 → 1.58.0

---

Release Notes

apache/httpcomponents-client (org.apache.httpcomponents.client5:httpclient5)

v5.6

This is the first ALPHA release in the 5.6 release series. It adds several features
such as transport content decompression and content compression for the async transport,
support for Unix sockets, experimental support for SCRAM-SHA-256 authentication scheme,
and Micrometer/OTel observations & metrics.

Commons Compress, Brotli codec, and ZStd codec are optional dependencies and get
wired into the execution pipeline only if present on the classpath.

Notable changes and features included in the 5.6 series:

• Unix domain socket support.

• Support for pluggable content codecs via Commons-Compress in the classic transport.
  (optional).

• Support for transparent content decompression and content compression with deflate,
  gzip, zstd (optional), and brotli (optional) codecs in the async transport.

• Micrometer/OTel observations & metrics (optinal).

• Off-lock connection disposal by the classic pooling connection manager. Experimental.

• SCRAM-SHA-256 authentication scheme (RFC 7804). Experimental.

• Request Priority support (RFC 9218). Experimental.

Compatibility notes:

• As of this version, HttpClient uses BUILTIN HostnameVerificationPolicy by default, delegating
  host verification to JSSE security manager. One must explicitly configure the TLS strategy
  to continue using the hostname verifier shipped with HttpClient.

• Five-second TCP keep-alive is now enabled by default.

apache/httpcomponents-core (org.apache.httpcomponents.core5:httpcore5)

v5.4

This is the first ALPHA release in the 5.4 release series that improves HTTP/2 protocol
support by ensuring conformance to the latest HTTP specification (RFC 9113) and adds
support for Unix domain sockets.

This release also includes all the fixes from the stable 5.3 branch.

Notable changes and features included in the 5.4 series:

• Experimental OFFLOCK (lock-free) connection pool.

• Conformance to RFC 9218 (Extensible Prioritization Scheme for HTTP).

• Improved conformance to RFC 9113 (Hypertext Transfer Protocol Version 2).

• Five-second TCP keep-alive enabled by default.

• Unix domain socket support by the classic and async transports.

• Redesign of classic over async API bridge.

• Improved URI encoding per RFC 3986.

• QUERY method support.

v5.3

This is the first GA release in the 5.3 release series. This release finalizes the 5.3 APIs
and improves integration test configuration APIs along with many test code improvements.

Notable changes and features included in the 5.3 series:

• Improved conformance to RFC 9110 and RFC 9112.

• UTF-8 encoding to be used by default for text where appropriate.

• Compatibility with Java Virtual Threads and Java 21 Runtime.

• Message parsing API improvements and performance optimization.

• TLS client endpoints to make use of JSSE Endpoint Identification by default.

• Redesign of server-side request routing API.

• Redesign of TLS session handling by classic (blocking) connections.

v5.2.4

This is a maintenance release that corrects a major defect discovered since release 5.2.3 that
can lead to an H2 connection failing at runtime with the message "Frame size exceeds maximum" when
executing requests with an enclosed message body and the remote endpoint having negotiated
a maximum frame size larger than the protocol default (16KB).

v5.2.3

This is a maintenance release that corrects several defects discovered since release 5.2.2 including
a major defect that can cause non-blocking character-based consumers to enter an invalid state and
stop processing incoming data.

v5.2.2

This is a maintenance release that corrects several defects discovered since release 5.2.1 including
a major defect that can cause HTTP/2 connections allocate excessive amount of memory for their output
frame buffer if the opposite endpoint transmits a high value of MAX_FRAME_SIZE in its settings.

open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-exporter-otlp)

v1.58.0

Compare Source

API

Incubator

• Delete GlobalConfigProvider in favor of access via ExtendedOpenTelemetry
  (#​7914)
• Add DeclarativeConfigProperties#get method
  (#​7923)
• Update ConfigProvider#getInstrumentationConfig response to be non-null
  (#​7954)
• Add declarative config utility methods for common operations
  (#​7927)

SDK

Traces

• Implement SDK metrics for trace
  (#​7895,
  #​7930)
• Emit warning when TraceIdRatioBasedSampler is used as child sampler
  (#​7937)

Logs

• Implement SDK metrics for logs
  (#​7931)

Exporters

• Prom exporter update
  (#​7934)

Extensions

• Declarative config: update to opentelemetry-configuration 1.0.0-rc.3
  (#​7861)
• Declarative config: update jaeger remote sampler to require endpoint, initial_sampler
  (#​7943)
• Declarative config: add support for view unit
  (#​7942)
• Declarative config: add support for new logger config minimum_severity and trace_based properties
  (#​7940)
• Declarative config: add support for composable parent threshold sampler
  (#​7941)
• Declarative config: improve pattern for validating and loading SDK extension plugins
  (#​7947)

Project tooling

• Use develocity build cache in PRs and local builds
  (#​7906)
• Configure japicmp classpath to avoid false positives
  (#​7945)

v1.57.0

Compare Source

API

• Add GlobalOpenTelemetry#getOrNoop, #isSet. Update #get to always returns obfuscated instance
  (#​7819)

Incubating

• Logs: Complex attributes incubating implementation
  (#​7814)

SDK

Logs

• Add minimum severity and trace-based logger configuration (incubating API)
  (#​7529)

Exporters

• OTLP: VarHandle string encoder
  (#​7701)
• OTLP: Fix OkHttpGrpcSender to properly await executor shutdown
  (#​7840)
• OTLP: avoid auto-config warning
  (#​7881)
• OTLP: update error message for missing GrpcSenderProvider dependency
  (#​7884)

Extensions

• Declarative config: add runtime hints for graal VM
  (#​7866)
• Declarative config: add missing warning about discarded value
  (#​7821)

Project tooling

• Update macos version to latest and switch to corretto for testing
  (#​7841)
• Sync Java worflows: Allow re-running prepare release branch workflow
  (#​7845)
• Simplify and standardize renovate custom managers across Java repos
  (#​7846)
• Remove misspell workflow
  (#​7852)
• Fix link checks on main
  (#​7867)
• Add zeitlinger as approver
  (#​7868)
• Move snapshot publishing to daily build
  (#​7886)

v1.56.0

Compare Source

API

Incubator

• Support ExtendedOpenTelemetry in GlobalOpenTelemetry
  (#​7799)

SDK

• Changes to MeterConfig, LoggerConfig, TracerConfig are guaranteed to be eventually visible
  (#​7706)

Metrics

• Stabilize ExemplarFilter
  (#​7768)
• Type specific exemplar reservoirs
  (#​7758)

Extensions

• SDK incubator: Add incubator ComposableRuleBasedSampler
  (#​7787)
• SDK incubator: Add incubator ComposableAnnotatingSampler
  (#​7804)
• SDK incubator: Rename ComposableTraceIdRatioBased to ComposableProbability
  (#​7786)
• Declarative config: BREAKING Remove component provider generic type
  (#​7606)
• Declarative config: Add declarative config support for ExemplarFilter
  (#​7769)
• Declarative config: Fix a few declarative configuration bugs
  (#​7807)

Project tooling

• Move to oracle bare metal benchmark runner
  (#​7740)
• Enable Develocity build scans
  (#​7776)
• Document GPG signing key
  (#​7783)
• Update build to use java 21
  (#​7784)
• Sync repository-settings.md documentation
  (#​7791)
• Fix gradle deprecation warning
  (#​7780)
• Small alignments of workflows across the 6 Java repos
  (#​7806)
• Implement min java version gradle tooling from instrumentation repo
  (#​7801)

v1.55.0

Compare Source

API

Common

• Improve GraalVM native image compatibility
  (#​7160)

Traces

• Fix TraceState key validation limits to match W3C specification
  (#​7575)

Incubator

• Add ExtendedOpenTelemetry API
  (#​7496)
• Add incubator implementation of composite sampling specification
  (#​7626)

SDK

Traces

• Proactively avoid Unsafe on Java 23+ to avoid triggering JVM warning message
  (#​7691)

Metrics

• Add setMeterConfigurator() support to MeterProvider (incubating API)
  (#​7346)

Exporters

• OTLP: Configure metric exporter to use SDK's MeterProvider for internal metrics
  (#​7541)
• OTLP: Suppress logging of InterruptedException from managed OkHttp threads
  (#​7565)
• OTLP: Update dependency from okhttp-jvm back to okhttp for Gradle users,
  preserving okhttp-jvm for Maven users
  (#​7681)
• Prometheus: Remove separate otel_scope_info metric and always add scope labels to data points
  (#​7398)
• Prometheus: Update exporter dependencies to use protobuf-free formats
  (#​7664)

Profiling

• Update profiles exporter to support proto v1.8.0-alpha changes
  (#​7638)
• Add abstractions to assist with dictionary table assembly
  (#​7717)
• Add abstractions to assist with sample composition
  (#​7727)

Extensions

• Autoconfigure: Improve exception logging when running in Maven
  (#​7336)
• Declarative configuration: Return Resource
  (#​7639)
• Declarative configuration: Invoke auto-configure listeners
  (#​7654)
• Declarative configuration: Add logging when incompatible types are found
  (#​7693)

Shims

OpenTracing Shim

• Improve log levels in error scenarios
  (#​6832)

Project tooling

• Respect testJavaVersion property when running JMH benchmarks
  (#​7697)

v1.54.1

Compare Source

SDK

Exporters

• Prometheus: Fix regression in protobuf format export
  (#​7664)

v1.54.0

Compare Source

API

Baggage

• Fix guard against ArrayIndexOutOfBoundsException in BaggageCodec
  (#​7239)

SDK

Metrics

• Fix MetricData.getDoubleSumData() ClassCastException with custom implementations
  (#​7597)

Exporters

• Fix HttpExporterBuilder.copy() and GrpcExporterBuilder.copy() to preserve component loader
  (#​7596)

Extensions

• Autoconfigure: Remove support for old EnvironmentResourceProvider package name
  (#​7622)
• Declarative config: Add DeclarativeConfigurationProvider SPI
  (#​7472)
• Declarative config: Pass meter provider to avoid using the global OpenTelemetry instance
  (#​7475)

Project tooling

• Update to Gradle v9
  (#​7590)

v1.53.0

Compare Source

SDK

• File based config will log the wrong file format, when applicable.
  (#​7498)

Exporters

• Change okhttp dependency to okhttp-jvm, which fixes missing class failures in
  transitive dependencies.
  (#​7517)

v1.52.0

Compare Source

API

Common

• Promote ComponentLoader to new opentelemetry-common artifact,
  standardize SPI loading
  (#​7446)

Context

• LazyStorage passes its ClassLoader when loading ContextStorageProvider SPI
  (#​7424)

Incubator

• Add context and severity params to ExtendedLogger#isEnabled
  (#​7268)
• Add new convenience methods for converting DeclarativeConfigProperties to config model
  (#​7453)

SDK

• Add custom stacktrace renderer which is length limit aware
  (#​7281)

Metrics

• Propagate flush to PeriodicMetricReader's metricExporter.
  (#​7410)

Exporters

• OTLP - JdkHttpSender: ensure proper closure of HttpClient in shutdown method
  (#​7390)
• OTLP: profile exporters fix and test improvements
  (#​7442)
• OTLP: Loading Compressor SPI via ComponentLoader configured through setComponentLoader
  (#​7428)
• Prometheus: add scope schema URL and attributes
  (#​7356)
• Prometheus: extend prometheus declarative config support to include without_scope_info,
  with_resource_constant_labels
  (#​6840)

Extensions

• Autoconfigure: fix race condition of GlobalOpenTelemetry initialization with
  AutoConfiguredOpenTelemetrySdkBuilder
  (#​7365)
• Declarative config: update to declarative config 1.0-rc.1
  (#​7436)
• Declarative config: resolve environment variable substitution for mixed quotes
  (#​7433)

v1.51.0

Compare Source

API

Context

• Fix context storage provider property name in log message
  (#​7342)

SDK

• Experimental configurable exception.* attribute resolution for SdkTracerProvider,
  SdkLoggerProvider
  (#​7266)

Exporters

• All exporters: implement new SemConv exporter health metrics, with configuration API for selecting
  schema version
  (#​7265)
• OTLP: Add gRPC export for profiles signal type.
  (#​7301)
• OTLP: Run JDK HTTP sender on non-daemon threads.
  (#​7322)
• Prometheus: fix serialization of arrays
  (#​7291)
• OTLP: exporter tolerates instances of LogRecordData when incubator is present
  (#​7393)

Extensions

• Declarative config: Handle instrumentation node changes in yaml config file format 0.4
  (#​7357)

v1.50.0

Compare Source

API

• Clarify that AttributesBuilder.put allows nulls
  (#​7271)
• Stabilize log record event name
  (#​7277)

Context

• Fix duplicated ExecutorService wrap
  (#​7245)
• Promote getAll to TextMapGetter stable API
  (#​7267)

Incubator

• Add ExtendedLogRecordBuilder#setException
  (#​7182)
• Add experimental support for log extended attributes
  (#​7123)

SDK

• Remove Java9VersionSpecific clock implementation
  (#​7221)
• Add addProcessorFirst to SdkTracerProviderBuilder, SdkLoggerProviderBuilder
  (#​7243)

Logs

• Add setLoggerConfigurator support to LoggerProvider
  (#​7332)

Metrics

• Add DelegatingMetricData
  (#​7229)
• Spatial aggregation for async instruments with filtering views
  (#​7264)

Exporters

• Prometheus: Add Authenticator support for PrometheusHttpServer
  (#​7225)
• OTLP: Fix OTLP metric exporter toBuilder() loosing temporality
  (#​7280)
• OTLP: Allow Otlp*MetricExporter's to publish export stats
  (#​7255)

Extensions

• Declarative config: Add support for escaping env var substitution
  (#​7033)
• Declarative config: update to opentelemetry-configuration 0.4
  (#​7064)
• Declarativeconfig: Refactor internals to add DeclarativeConfigContext
  (#​7293)

Project tooling

• Kotlin extension: Update min kotlin version to 1.8
  (#​7155)
• Add javadoc site crawler
  (#​7300,
  #​7316)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.