Commit ffb6b02
chore(deps): update upper bound dependencies file (googleapis#4112)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[com.google.auth:google-auth-library-bom](https://togithub.com/googleapis/google-auth-library-java)
| minor | `1.42.1` -> `1.43.0` |
|
[com.google.errorprone:error_prone_annotations](https://errorprone.info)
([source](https://togithub.com/google/error-prone)) | minor | `2.46.0`
-> `2.47.0` |
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | patch |
`4.33.4` -> `4.33.5` |
| [io.grpc:grpc-bom](https://togithub.com/grpc/grpc-java) | minor |
`1.78.0` -> `1.79.0` |
|
[io.opentelemetry:opentelemetry-bom](https://togithub.com/open-telemetry/opentelemetry-java)
| minor | `1.58.0` -> `1.59.0` |
| [org.apache.httpcomponents.core5:httpcore5](https://hc.apache.org/) |
patch | `5.4` -> `5.4.1` |
---
### Release Notes
<details>
<summary>googleapis/google-auth-library-java
(com.google.auth:google-auth-library-bom)</summary>
###
[`v1.43.0`](https://togithub.com/googleapis/google-auth-library-java/blob/HEAD/CHANGELOG.md#1430-2026-02-10)
[Compare
Source](https://togithub.com/googleapis/google-auth-library-java/compare/v1.42.1...v1.43.0)
##### Features
- Next release from main branch is 1.43.0
([#​1887](https://togithub.com/googleapis/google-auth-library-java/issues/1887))
([bec0ece](https://togithub.com/googleapis/google-auth-library-java/commit/bec0ecea8d1064a3467c4329a0d09f7d5705f84d))
##### Bug Fixes
- Deserialization checks valid class types for HttpTransportFactory
([#​1882](https://togithub.com/googleapis/google-auth-library-java/issues/1882))
([76ff74e](https://togithub.com/googleapis/google-auth-library-java/commit/76ff74e4c810d54763ca34d4f483730c43c329a8))
</details>
<details>
<summary>google/error-prone
(com.google.errorprone:error_prone_annotations)</summary>
###
[`v2.47.0`](https://togithub.com/google/error-prone/releases/tag/v2.47.0):
Error Prone 2.47.0
[Compare
Source](https://togithub.com/google/error-prone/compare/v2.46.0...v2.47.0)
New checks:
-
[`InterruptedInCatchBlock`](https://errorprone.info/bugpattern/InterruptedInCatchBlock):
Detect accidental calls to `Thread.interrupted()` inside of
`catch(InterruptedException e)` blocks.
- [`RefactorSwitch`](https://errorprone.info/bugpattern/RefactorSwitch):
Refactorings to simplify arrow switches
-
[`UnnamedVariable`](https://errorprone.info/bugpattern/UnnamedVariable):
Rename unused variables to `_`
Closed issues:
[#​1811](https://togithub.com/google/error-prone/issues/1811),
[#​4168](https://togithub.com/google/error-prone/issues/4168),
[#​5459](https://togithub.com/google/error-prone/issues/5459),
[#​5460](https://togithub.com/google/error-prone/issues/5460)
Full changelog:
google/error-prone@v2.46.0...v2.47.0
</details>
<details>
<summary>grpc/grpc-java (io.grpc:grpc-bom)</summary>
###
[`v1.79.0`](https://togithub.com/grpc/grpc-java/releases/tag/v1.79.0)
[Compare
Source](https://togithub.com/grpc/grpc-java/compare/v1.78.0...v1.79.0)
**API Changes**
- core: Delete the never-used
io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer)
([#​12580](https://togithub.com/grpc/grpc-java/issues/12580))
([`738782f`](https://togithub.com/grpc/grpc-java/commit/738782fb0)).
This is deeply internal and not accessible, so shouldn’t impact
anything. However, Apache Arrow Java [uses reflection to access private
fields](https://togithub.com/apache/arrow-java/blob/96156ccc2bf933c75c852ca7c04418a61f87defd/flight/flight-core/src/main/java/org/apache/arrow/flight/grpc/GetReadableBuffer.java#L44-L45);
[googleapisGH-939: Remove reflection for gRPC
buffers](https://togithub.com/apache/arrow-java/pull/954) is swapping to
gRPC’s public zero-copy APIs
- opentelemetry: Add target attribute filter for metrics
([#​12587](https://togithub.com/grpc/grpc-java/issues/12587)).
Introduce an optional Predicate targetAttributeFilter to control how
grpc.target is recorded in OpenTelemetry client metrics. When a filter
is provided, targets rejected by the predicate are normalized to "other"
to reduce grpc.target metric cardinality, while accepted targets are
recorded as-is. If no filter is set, existing behavior is preserved.
This change adds a new Builder API on GrpcOpenTelemetry to allow
applications to configure the filter.
**Behavior Changes**
- core: Convert AutoConfiguredLB to an actual LB
([`4bbf8ee`](https://togithub.com/grpc/grpc-java/commit/4bbf8eee5)).
This is an internal refactoring, but it does improve how errors are
handled for broken binaries. Previously, not being able to load
pick_first would result in a channel panic. Now it is handled as a
regular load balancing error
- okhttp: Assert no pending streams before transport READY
([#​12566](https://togithub.com/grpc/grpc-java/issues/12566))
([`ed6d175`](https://togithub.com/grpc/grpc-java/commit/ed6d175fc)). No
pending streams should exist when the transport transitions to READY.
This PR adds an assertion to help verify this invariant.
**Bug Fixes**
- core: PickFirstLB should not return a subchannel during CONNECTING
([`228fc8e`](https://togithub.com/grpc/grpc-java/commit/228fc8ecd)).
Pick-first in grpc-java has behaved this way since it was created, and
it was of no consequence. However, now there are some load balancing
policies (mainly RLS) that will do a pick() and hope the result to be
reasonably accurate for metrics.
**Improvements**
- core: Improve DEADLINE_EXCEEDED message for CallCreds delays
([`ead532b`](https://togithub.com/grpc/grpc-java/commit/ead532b39)).
Previously the error message contained “buffered_nanos” and
“waiting_for_connection” for connection delays. However, we discovered
the same strings were also used if waiting on CallCredentials. Now
you’ll see details like “connecting_and_lb_delay”,
“call_credentials_delay”, and “was_still_waiting”.
- opentelemetry: Add Android API checking
([`a9f73f4`](https://togithub.com/grpc/grpc-java/commit/a9f73f4c0)).
Previously we assumed OpenTelemetry support would not be used on
Android. It did happen to be compatible with Android, but since
OpenTelemetry does have some Android support, we now have a check that
it remains compatible
- core: Catch Errors when calling complex config parsing code
([`a535ed7`](https://togithub.com/grpc/grpc-java/commit/a535ed799)).
Error (and any other Throwable) is now caught and handled when parsing
configuration (e.g., service config, xds). This will cause such failures
to be handled gracefully instead of panicking the channel
- core: Implement LoadBalancer.Helper.createOobChannel() with the
internals of createResolvingOobChannel()
([`3915d02`](https://togithub.com/grpc/grpc-java/commit/3915d029c)).
This API is only expected to be relevant to the gRPC-LB lookaside load
balancer, and is not believed to have behavior changes. Out-of-band
channel had been implemented with its own stripped-down Channel without
load balancing. Reimplementing using the resolving oob channel makes it
a full-fledged channel and reduces the burden when integrating new
features and allows us to have a ManagedChannelBuilder to use with
efforts like [gRFC A110: Child Channel
Options](https://togithub.com/grpc/proposal/pull/529).
- xds: Implement the proactive connection logic in RingHashLoadBalancer
as outlined in gRFC A61
([#​12596](https://togithub.com/grpc/grpc-java/issues/12596)).
Previously, the Java implementation only initialized child balancers
when a ring-chosen endpoint was in TRANSIENT_FAILURE during a picker's
pickSubchannel call. This PR adds the missing logic: when a child
balancer reports TRANSIENT_FAILURE, the LoadBalancer now proactively
initializes the first available IDLE child if no other children are
currently connecting or ready.
This ensures a backup subchannel starts warming up immediately outside
the RPC flow, reducing failover latency and improving overall
resilience. This behavior was previously present but was inadvertently
lost after
[#​10610](https://togithub.com/grpc/grpc-java/pull/10610).
- api: Add RFC 3986 support to DnsNameResolverProvider
([#​12602](https://togithub.com/grpc/grpc-java/issues/12602))
([`f65127c`](https://togithub.com/grpc/grpc-java/commit/f65127cf7))
Experimental RFC 3986 target URI parsing mode (disabled by default)
**New Features**
- opentelemetry: Actual reason for the disconnects in subchannel
metrics([`6b2f758`](https://togithub.com/grpc/grpc-java/commit/6b2f7580c)),
completing the remaining work in [gRFC A96: OTel metrics for
Subchannels](https://togithub.com/grpc/proposal/pull/485/files)
**Dependencies**
- protobuf: Upgrade Bazel protobuf to 33.1
([#​12553](https://togithub.com/grpc/grpc-java/issues/12553))
([`b61a8f4`](https://togithub.com/grpc/grpc-java/commit/b61a8f49c)) and
load java_proto_library from the protobuf repo
([`c7f3cdb`](https://togithub.com/grpc/grpc-java/commit/c7f3cdbc3))
- protobuf: Fix build with Bazel 9 by upgrading bazel_jar_jar and
grpc-proto versions
([#​12569](https://togithub.com/grpc/grpc-java/issues/12569))
- Upgrade dependencies
([#​12588](https://togithub.com/grpc/grpc-java/issues/12588))
([`6422092`](https://togithub.com/grpc/grpc-java/commit/6422092e3))
Netty to 4.1.130, error-prone annotations to 2.45.0, google-auth-library
to 1.41.0, tomcat-embed-core9 to 9.0.113, tomcat-embed-core to 10.1.50,
opentelemetry to 1.57.0, jetty-ee10-servlet to 12.1.5,
jetty-http2-server to 12.1.5, google-cloud-logging to 3.23.9,
google-auth to 1.41.0, proto-google-common-protos to 2.63.2.
**Thanks to**
- [@​benjaminp](https://togithub.com/benjaminp)
- [@​becomeStar](https://togithub.com/becomeStar)
- [@​meteorcloudy](https://togithub.com/meteorcloudy)
</details>
<details>
<summary>open-telemetry/opentelemetry-java
(io.opentelemetry:opentelemetry-bom)</summary>
###
[`v1.59.0`](https://togithub.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1590-2026-02-06)
[Compare
Source](https://togithub.com/open-telemetry/opentelemetry-java/compare/v1.58.0...v1.59.0)
##### API
- Stabilize complex attributes
([#​7973](https://togithub.com/open-telemetry/opentelemetry-java/pull/7973))
- Limit init valid hex array to range that can be true
([#​7809](https://togithub.com/open-telemetry/opentelemetry-java/pull/7809))
##### Extensions
- Trace propagators: Deprecate OtTracePropagator
([#​8020](https://togithub.com/open-telemetry/opentelemetry-java/pull/8020))
- Trace propagators: Deprecate JaegerPropagator
([#​8019](https://togithub.com/open-telemetry/opentelemetry-java/pull/8019))
##### SDK
- Move io.opentelemetry.sdk.internal to
io.opentelemetry.sdk.common.internal
([#​8003](https://togithub.com/open-telemetry/opentelemetry-java/pull/8003))
- Always return ExtendedOpenTelemetry when incubator is available
([#​7991](https://togithub.com/open-telemetry/opentelemetry-java/pull/7991))
##### Traces
- Fix memory leak in SdkSpan#spanEndingThread
([#​7984](https://togithub.com/open-telemetry/opentelemetry-java/pull/7984))
##### Metrics
- Rework and publish metric benchmarks
([#​8000](https://togithub.com/open-telemetry/opentelemetry-java/pull/8000))
- Update LongLastValueAggregator algo to avoid allocations
([#​8017](https://togithub.com/open-telemetry/opentelemetry-java/pull/8017))
##### Testing
- Fix OTel JUnit5 Extension cleanup when using Nested test classes
([#​7999](https://togithub.com/open-telemetry/opentelemetry-java/pull/7999))
- Add assertion support for Span hasException(null)
([#​8033](https://togithub.com/open-telemetry/opentelemetry-java/pull/8033))
##### Exporters
- **DEPRECATION**: `opentelemetry-exporter-zipkin` is now deprecated
with the
last release planned for 1.65.0 (August 2026)
([#​7974](https://togithub.com/open-telemetry/opentelemetry-java/pull/7974))
- Refactor http, grpc senders and promote to public API
([#​7782](https://togithub.com/open-telemetry/opentelemetry-java/pull/7782))
##### Extensions
- Jaeger remote sampler: Remove unused code
([#​7970](https://togithub.com/open-telemetry/opentelemetry-java/pull/7970))
- Incubator: Add AlwaysRecordSampler
([#​7877](https://togithub.com/open-telemetry/opentelemetry-java/pull/7877))
##### Project tooling
- Align generate release contributors
([#​8023](https://togithub.com/open-telemetry/opentelemetry-java/pull/8023))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>1 parent 825298b commit ffb6b02
1 file changed
+6
-6
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
13 | | - | |
| 12 | + | |
| 13 | + | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
19 | | - | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
40 | | - | |
| 40 | + | |
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
| |||
0 commit comments