Update all patch/minor versions (master)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
tomcat	final	patch	9.0.109-jre21-temurin-jammy -> 9.0.111-jre21-temurin-jammy
org.apache.groovy:groovy-all (source)	dependencies	patch	5.0.1 -> 5.0.2
io.sentry:sentry-logback	dependencies	minor	8.23.0 -> 8.25.0
com.amazonaws:aws-java-sdk-s3 (source)	dependencies	patch	1.12.791 -> 1.12.793
ch.qos.logback:logback-access (source, changelog)	dependencies	patch	1.5.19 -> 1.5.20
ch.qos.logback:logback-classic (source, changelog)	dependencies	patch	1.5.19 -> 1.5.20
spotbugs (source)	dependencies	patch	4.9.6 -> 4.9.8
org.apache.groovy:groovy-json (source)	dependencies	patch	5.0.1 -> 5.0.2
org.apache.groovy:groovy-xml (source)	dependencies	patch	5.0.1 -> 5.0.2
com.github.spotbugs	plugin	patch	6.4.2 -> 6.4.4

---

Release Notes

getsentry/sentry-java (io.sentry:sentry-logback)

v8.25.0

Compare Source

Fixes

• [ANR] Removed AndroidTransactionProfiler lock (#​4817)
• Avoid ExecutorService for DefaultCompositePerformanceCollector timeout (#​4841)
  • This avoids infinite data collection for never stopped transactions, leading to OOMs
• Fix wrong .super() call in SentryTimberTree (#​4844)

Improvements

• [ANR] Defer some class availability checks (#​4825)
• Collect PerformanceCollectionData only for sampled transactions (#​4834)
  • Breaking change: Transactions with a deferred sampling decision (sampled == null) won't be collecting any performance data anymore (CPU, RAM, slow/frozen frames).

Dependencies

• Bump Native SDK from v0.11.2 to v0.11.3 (#​4810)
  • changelog
  • diff

v8.24.0

Compare Source

Features

• Attach MDC properties to logs as attributes (#​4786)
  • MDC properties set using supported logging frameworks (Logback, Log4j2, java.util.Logging) are now attached to structured logs as attributes.
  • The attribute reflected on the log is mdc.<key>, where <key> is the original key in the MDC.
  • This means that you will be able to filter/aggregate logs in the product based on these properties.
  • Only properties with keys matching the configured contextTags are sent as log attributes.
    • You can configure which properties are sent using options.setContextTags if initalizing manually, or by specifying a comma-separated list of keys with a context-tags entry in sentry.properties or sentry.context-tags in application.properties.
    • Note that keys containing spaces are not supported.
• Add experimental Sentry Android Distribution module for integrating with Sentry Build Distribution to check for and install updates (#​4804)
• Allow passing a different Handler to SystemEventsBreadcrumbsIntegration and AndroidConnectionStatusProvider so their callbacks are deliver to that handler (#​4808)
• Session Replay: Add new experimental Canvas Capture Strategy (#​4777)
  • A new screenshot capture strategy that uses Android's Canvas API for more accurate and reliable text and image masking
  • Any .drawText() or .drawBitmap() calls are replaced by rectangles, ensuring no text or images are present in the resulting output
  • Note: If this strategy is used, all text and images will be masked, regardless of any masking configuration
  • To enable this feature, set the screenshotStrategy, either via code:

    SentryAndroid.init(context) { options ->
      options.sessionReplay.screenshotStrategy = ScreenshotStrategyType.CANVAS
    }

    or AndroidManifest.xml:

    <application>
      <meta-data android:name="io.sentry.session-replay.screenshot-strategy" android:value="canvas" />
    </application>

Fixes

• Avoid StrictMode warnings (#​4724)
• Use logger from options for JVM profiler (#​4771)
• Session Replay: Avoid deadlock when pausing replay if no connection (#​4788)
• Session Replay: Fix capturing roots with no windows (#​4805)
• Session Replay: Fix java.lang.IllegalArgumentException: width and height must be > 0 (#​4805)
• Handle NoOpScopes in Context when starting a span through OpenTelemetry (#​4823)
  • This fixes "java.lang.IllegalArgumentException: The DSN is required" when combining WebFlux and OpenTelemetry
• Session Replay: Do not use recycled screenshots for masking (#​4790)
  • This fixes native crashes seen in Canvas.<init>/ScreenshotRecorder.capture
• Session Replay: Ensure bitmaps are recycled properly (#​4820)

Miscellaneous

• Mark SentryClient(SentryOptions) constructor as not internal (#​4787)

Dependencies

• Bump Native SDK from v0.10.1 to v0.11.2 (#​4775)
  • changelog
  • diff

aws/aws-sdk-java (com.amazonaws:aws-java-sdk-s3)

v1.12.793

Compare Source

AWS SDK for Java

• Features

  • Add ap-southeast-6 region

v1.12.792

Compare Source

Amazon DynamoDB

• Bugfixes

  • Prevent overriding client endpoint with dual-stack regional endpoint

Amazon S3

• Bugfixes

  • Add additional validations for multipart download operations of S3 client
  • Add additional validations for multipart upload operations of S3 client.

spotbugs/spotbugs (spotbugs)

v4.9.8

Compare Source

Fixed

• Maven plugin reporting issue if -adjustPriority is not set (#​3774)

v4.9.7

Compare Source

Fixed

• Fix Eclipse not always using latest preferences file state (#​3740)
• Fix exception throw when singleton implementing Cloneable has no clone() method (#​3727)
• Fix for missing -adjustPriority parameter in Eclipse preferences (#​3687)
• Documentation of -adjustPriority parameter
• Functionality from DetectorFactory setEnabledButNonReporting(), getPriorityAdjustment() methods and BugInstance.adjustForDetector() is deprecated and moved to PriorityAdjuster (#​3753)
• Improved FindNakedNotify to handle the case when the lock is loaded from a field (#​3634)

Changed

• Support for fully qualified class names for detectors in -adjustPriority parameter
• Support for numerical and absolute priority adjustments
• Bump up Apache Commons BCEL to the version 6.11.0 (#​3569)

Deprecated

• Add back and deprecate edu.umd.cs.findbugs.io.IO.close(InputStream) method. (#​3756)

Build

• Allow our GA builds to work with JDK 25 (and drop support for JDK 24) (#​3564)

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month,on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.