Merge branch 'main' of github.com:open-telemetry/opentelemetry-java-instrumentation into indy-servlet3

Author: SylvainJuge

.github/workflows/pr-smoke-test-quarkus-images.yml

@@ -15,5 +15,6 @@ jobs:
     with:
       project: ":smoke-tests:images:quarkus"
       cache-read-only: true
-      # Quarkus 2.0+ does not support Java 8
+      # Quarkus 3.7+ requires Java 17+
       skip-java-8: true
+      skip-java-11: true

.github/workflows/publish-smoke-test-quarkus-images.yml

@@ -15,8 +15,9 @@ jobs:
     with:
       project: ":smoke-tests:images:quarkus"
       publish: true
-      # Quarkus 2.0+ does not support Java 8
+      # Quarkus 3.7+ requires Java 17+
       skip-java-8: true
+      skip-java-11: true
 
   workflow-notification:
     needs:

.github/workflows/reusable-native-tests.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - id: read-java
         run: echo "version=$(cat .java-version)" >> "$GITHUB_OUTPUT"
-      - uses: graalvm/setup-graalvm@6f327093bb6a42fe5eac053d21b168c46aa46f22 # v1.2.4.1
+      - uses: graalvm/setup-graalvm@557ffcf459751b4d92319ee255bf3bec9b73964c # v1.2.5.1
         with:
           version: "latest"
           java-version: "${{ steps.read-java.outputs.version }}"

.github/workflows/reusable-smoke-test-images.yml

@@ -22,6 +22,9 @@ on:
       skip-java-8:
         type: boolean
         required: false
+      skip-java-11:
+        type: boolean
+        required: false
       skip-java-17:
         type: boolean
         required: false
@@ -70,6 +73,7 @@ jobs:
         run: ./gradlew ${{ inputs.project }}:${{ inputs.publish && 'jib' || 'jibDockerBuild' }} -Ptag=${{ env.TAG }} -PtargetJDK=8 -Djib.httpTimeout=120000 -Djib.console=plain
 
       - name: Build Java 11 Docker image
+        if: "!inputs.skip-java-11"
         run: ./gradlew ${{ inputs.project }}:${{ inputs.publish && 'jib' || 'jibDockerBuild' }} -Ptag=${{ env.TAG }} -PtargetJDK=11 -Djib.httpTimeout=120000 -Djib.console=plain
 
       - name: Build Java 17 Docker image

conventions/build.gradle.kts

@@ -57,14 +57,14 @@ dependencies {
   implementation("com.diffplug.spotless:spotless-plugin-gradle:6.25.0")
   implementation("com.google.guava:guava:33.3.1-jre")
   implementation("gradle.plugin.com.google.protobuf:protobuf-gradle-plugin:0.8.18")
-  implementation("com.gradleup.shadow:shadow-gradle-plugin:8.3.3")
+  implementation("com.gradleup.shadow:shadow-gradle-plugin:8.3.5")
   implementation("org.apache.httpcomponents:httpclient:4.5.14")
   implementation("com.gradle.develocity:com.gradle.develocity.gradle.plugin:3.18.1")
-  implementation("org.owasp:dependency-check-gradle:11.0.0")
+  implementation("org.owasp:dependency-check-gradle:11.1.0")
   implementation("ru.vyarus:gradle-animalsniffer-plugin:1.7.1")
   implementation("org.spdx:spdx-gradle-plugin:0.8.0")
   // When updating, also update dependencyManagement/build.gradle.kts
-  implementation("net.bytebuddy:byte-buddy-gradle-plugin:1.15.7")
+  implementation("net.bytebuddy:byte-buddy-gradle-plugin:1.15.9")
   implementation("gradle.plugin.io.morethan.jmhreport:gradle-jmh-report:0.9.6")
   implementation("me.champeau.jmh:jmh-gradle-plugin:0.7.2")
   implementation("net.ltgt.gradle:gradle-errorprone-plugin:4.1.0")

conventions/src/main/kotlin/otel.java-conventions.gradle.kts

@@ -434,7 +434,7 @@ codenarc {
 checkstyle {
   configFile = rootProject.file("buildscripts/checkstyle.xml")
   // this version should match the version of google_checks.xml used as basis for above configuration
-  toolVersion = "10.19.0"
+  toolVersion = "10.20.0"
   maxWarnings = 0
 }
 

dependencyManagement/build.gradle.kts

@@ -27,7 +27,7 @@ val groovyVersion = "4.0.23"
 // configurations.testRuntimeClasspath.resolutionStrategy.force "com.google.guava:guava:19.0"
 
 val DEPENDENCY_BOMS = listOf(
-  "com.fasterxml.jackson:jackson-bom:2.18.0",
+  "com.fasterxml.jackson:jackson-bom:2.18.1",
   "com.squareup.okio:okio-bom:3.9.1", // see https://github.com/open-telemetry/opentelemetry-java/issues/5637
   "com.google.guava:guava-bom:33.3.1-jre",
   "org.apache.groovy:groovy-bom:${groovyVersion}",
@@ -41,12 +41,12 @@ val DEPENDENCY_BOMS = listOf(
 val autoServiceVersion = "1.1.1"
 val autoValueVersion = "1.11.0"
 val errorProneVersion = "2.35.1"
-val byteBuddyVersion = "1.15.7"
+val byteBuddyVersion = "1.15.9"
 val asmVersion = "9.7.1"
 val jmhVersion = "1.37"
 val mockitoVersion = "4.11.0"
 val slf4jVersion = "2.0.16"
-val semConvVersion = "1.25.0-alpha"
+val semConvVersion = "1.28.0-alpha"
 
 val CORE_DEPENDENCIES = listOf(
   "io.opentelemetry.semconv:opentelemetry-semconv:${semConvVersion}",
@@ -87,7 +87,7 @@ val DEPENDENCIES = listOf(
   "com.github.stefanbirkner:system-lambda:1.2.1",
   "com.github.stefanbirkner:system-rules:1.19.0",
   "uk.org.webcompere:system-stubs-jupiter:2.0.3",
-  "com.uber.nullaway:nullaway:0.12.0",
+  "com.uber.nullaway:nullaway:0.12.1",
   "commons-beanutils:commons-beanutils:1.9.4",
   "commons-cli:commons-cli:1.9.0",
   "commons-codec:commons-codec:1.17.1",

examples/distro/build.gradle

@@ -13,7 +13,7 @@ buildscript {
   }
   dependencies {
     classpath "com.diffplug.spotless:spotless-plugin-gradle:6.25.0"
-    classpath "com.gradleup.shadow:shadow-gradle-plugin:8.3.3"
+    classpath "com.gradleup.shadow:shadow-gradle-plugin:8.3.5"
     classpath "io.opentelemetry.instrumentation:gradle-plugins:2.10.0-alpha-SNAPSHOT"
   }
 }

examples/distro/smoke-tests/build.gradle

@@ -4,7 +4,7 @@ plugins {
 
 dependencies {
   testImplementation("org.testcontainers:testcontainers:1.20.3")
-  testImplementation("com.fasterxml.jackson.core:jackson-databind:2.18.0")
+  testImplementation("com.fasterxml.jackson.core:jackson-databind:2.18.1")
   testImplementation("com.google.protobuf:protobuf-java-util:4.28.3")
   testImplementation("com.squareup.okhttp3:okhttp:4.12.0")
   testImplementation("io.opentelemetry.proto:opentelemetry-proto:1.3.2-alpha")

examples/extension/build.gradle

@@ -10,7 +10,7 @@ plugins {
   into a single jar.
   See https://imperceptiblethoughts.com/shadow/ for more details about Shadow plugin.
    */
-  id "com.gradleup.shadow" version "8.3.3"
+  id "com.gradleup.shadow" version "8.3.5"
   id "com.diffplug.spotless" version "6.25.0"
 
   id "io.opentelemetry.instrumentation.muzzle-generation" version "2.10.0-alpha-SNAPSHOT"
@@ -100,7 +100,7 @@ dependencies {
 
   //All dependencies below are only for tests
   testImplementation("org.testcontainers:testcontainers:1.20.3")
-  testImplementation("com.fasterxml.jackson.core:jackson-databind:2.18.0")
+  testImplementation("com.fasterxml.jackson.core:jackson-databind:2.18.1")
   testImplementation("com.google.protobuf:protobuf-java-util:4.28.3")
   testImplementation("com.squareup.okhttp3:okhttp:4.12.0")
   testImplementation("io.opentelemetry:opentelemetry-api")