Merge branch 'main' of github.com:jaydeluca/opentelemetry-java-instrumentation into spring-webmvc-update

Author: jaydeluca

.github/workflows/auto-license-report.yml

@@ -67,7 +67,7 @@ jobs:
             echo "exists=true" >> $GITHUB_OUTPUT
           fi
 
-      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+      - uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
         if: steps.check-patch.outputs.exists == 'true'
         id: otelbot-token
         with:

.github/workflows/build-daily.yml

@@ -31,6 +31,44 @@ jobs:
   markdown-lint-check:
     uses: ./.github/workflows/reusable-markdown-lint-check.yml
 
+  publish-snapshots:
+    needs:
+      - common
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+
+      - name: Free disk space
+        run: .github/scripts/gha-free-disk-space.sh
+
+      - name: Set up JDK for running Gradle
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
+        with:
+          distribution: temurin
+          java-version-file: .java-version
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
+
+      - name: Build and publish artifact snapshots
+        env:
+          DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
+          SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }}
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
+        run: ./gradlew assemble spdxSbom publishToSonatype
+
+      - name: Build and publish gradle plugin snapshots
+        env:
+          DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
+          SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }}
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
+        run: ./gradlew build publishToSonatype
+        working-directory: gradle-plugins
+
   workflow-notification:
     permissions:
       contents: read
@@ -40,6 +78,7 @@ jobs:
       - test-latest-deps
       - muzzle
       - link-check
+      - publish-snapshots
     if: always()
     uses: ./.github/workflows/reusable-workflow-notification.yml
     with:
@@ -48,5 +87,6 @@ jobs:
           needs.common.result == 'success' &&
           needs.test-latest-deps.result == 'success' &&
           needs.muzzle.result == 'success' &&
-          needs.link-check.result == 'success'
+          needs.link-check.result == 'success' &&
+          needs.publish-snapshots.result == 'success'
         }}

.github/workflows/build.yml

@@ -45,44 +45,3 @@ jobs:
     # release branches are excluded
     if: "!startsWith(github.ref_name, 'release/')"
     uses: ./.github/workflows/reusable-markdown-lint-check.yml
-
-  publish-snapshots:
-    needs:
-      # intentionally not blocking snapshot publishing on test-latest-deps, muzzle, or link-check
-      - common
-    runs-on: ubuntu-latest
-    # skipping release branches because the versions in those branches are not snapshots
-    if: github.ref_name == 'main' && github.repository == 'open-telemetry/opentelemetry-java-instrumentation'
-    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-
-      - name: Free disk space
-        run: .github/scripts/gha-free-disk-space.sh
-
-      - name: Set up JDK for running Gradle
-        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
-        with:
-          distribution: temurin
-          java-version-file: .java-version
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
-
-      - name: Build and publish artifact snapshots
-        env:
-          DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
-          SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
-          SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }}
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
-        run: ./gradlew assemble spdxSbom publishToSonatype
-
-      - name: Build and publish gradle plugin snapshots
-        env:
-          DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
-          SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
-          SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }}
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
-        run: ./gradlew build publishToSonatype
-        working-directory: gradle-plugins

.github/workflows/issue-management-stale-action.yml

@@ -56,13 +56,13 @@ jobs:
           operations-per-run: 1000
 
       # Action #3: Handle stale PRs
-      # - After 180 days inactive: Adds "stale" label + warning comment
+      # - After 90 days inactive: Adds "stale" label + warning comment
       # - After 14 more days inactive: Closes
       - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           days-before-issue-stale: -1
           days-before-issue-close: -1
-          days-before-pr-stale: 180
+          days-before-pr-stale: 90
           days-before-pr-close: 14
           stale-pr-label: stale
           stale-pr-message: >

.github/workflows/pr-automation-comments.yml

@@ -42,7 +42,7 @@ jobs:
                 "",
                 "### Checklist",
                 "- [ ] Migration notes added to the PR description",
-                "- [ ] Breaking change is documented in the changelog entry for the next release",
+                "- [ ] Breaking change is documented in the "Unreleased" section of the [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md), preferably as part of this PR.",
                 "- [ ] Consider if this change requires a major version bump",
                 "",
                 "Your migration notes will be included in the release notes to help users upgrade smoothly. The more detailed and helpful they are, the better the user experience will be.",

.github/workflows/reusable-markdown-lint-check.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
-      - uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1
+      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
 
       - name: Run markdownlint
         run: |

.github/workflows/reusable-native-tests.yml

@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - id: read-java
         run: echo "version=$(cat .java-version)" >> "$GITHUB_OUTPUT"
-      - uses: graalvm/setup-graalvm@eec48106e0bf45f2976c2ff0c3e22395cced8243 # v1.4.2.1
+      - uses: graalvm/setup-graalvm@dec5790292b7b36d7ad368abe856887749c6c520 # v1.4.3.1
         with:
           version: "latest"
           java-version: ${{ matrix.test-java-version }}

.mise/tasks/lint/markdown.sh

@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
 #MISE description="Lint markdown files"
-#MISE flag "--fix" help="Automatically fix issues"
+#USAGE flag "--fix" help="Automatically fix issues"
 
 set -e
 
-if [ "${usage_fix}" = "true" ]; then
+if [ "${usage_fix:-false}" = "true" ]; then
   markdownlint-cli2 --fix "**/*.md" "#**/build" "#CHANGELOG.md" "#licenses/licenses.md"
 else
   markdownlint-cli2 "**/*.md" "#**/build" "#CHANGELOG.md" "#licenses/licenses.md"

benchmark-overhead-jmh/build.gradle.kts

@@ -1,4 +1,3 @@
-import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
 import me.champeau.jmh.JMHTask
 import net.ltgt.gradle.errorprone.errorprone
 
@@ -44,7 +43,7 @@ tasks {
   val jmhStartFlightRecording = gradle.startParameter.projectProperties.get("jmh.startFlightRecording")
 
   named<JMHTask>("jmh") {
-    val shadowTask = project(":javaagent").tasks.named<ShadowJar>("shadowJar").get()
+    val shadowTask = project(":javaagent").tasks.named<Jar>("shadowJar").get()
     inputs.files(layout.files(shadowTask))
 
     // note: without an exporter, toSpanData() won't even be called

conventions/src/main/kotlin/otel.java-conventions.gradle.kts

@@ -159,7 +159,7 @@ dependencies {
   compileOnly("com.google.code.findbugs:jsr305")
   compileOnly("com.google.errorprone:error_prone_annotations")
 
-  codenarc("org.codenarc:CodeNarc:3.6.0")
+  codenarc("org.codenarc:CodeNarc:3.7.0")
   codenarc(platform("org.codehaus.groovy:groovy-bom:3.0.25"))
 
   modules {
@@ -422,7 +422,7 @@ codenarc {
 checkstyle {
   configFile = rootProject.file("buildscripts/checkstyle.xml")
   // this version should match the version of google_checks.xml used as basis for above configuration
-  toolVersion = "12.1.2"
+  toolVersion = "12.2.0"
   maxWarnings = 0
 }