Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update weekly update (graalvm/setup-graalvm, python, ubuntu)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency com.google.api.grpc:proto-google-common-protos to v2.61.2
• fix(deps): update dependency org.owasp:dependency-check-gradle to v12.1.5
• fix(deps): update errorproneversion to v2.42.0 (com.google.errorprone:error_prone_test_helpers, com.google.errorprone:error_prone_core, com.google.errorprone:error_prone_annotations)
• fix(deps): update prometheusserverversion to v1.4.1 (io.prometheus:prometheus-metrics-exposition-formats-no-protobuf, io.prometheus:prometheus-metrics-exporter-httpserver)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update plugin org.graalvm.buildtools.native to v0.11.0
• fix(deps): update dependency nl.jqno.equalsverifier:equalsverifier to v4

Detected dependencies

dockerfile

integration-tests/tracecontext/docker/Dockerfile

• python 3.13.7@sha256:c1dab8c06c4fe756fd4316f33a2ba4497be09fa106d2cd9782c33ee411193f9c
• python 3.13.7-slim@sha256:58c30f5bfaa718b5803a53393190b9c68bd517c44c6c94c1b6c8c172bcfad040

github-actions

.github/workflows/backport.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42

.github/workflows/benchmark-tags.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• benchmark-action/github-action-benchmark v1.20.7@4bdcce38c94cec68da58d012ac24b7b1155efe8b

.github/workflows/benchmark.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• benchmark-action/github-action-benchmark v1.20.7@4bdcce38c94cec68da58d012ac24b7b1155efe8b
• ubuntu 24.04@sha256:9cbed754112939e914291337b5e554b07ad7c392491dba6daf25eef1332a22e8

.github/workflows/build-tracecontext-testsuite.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/build.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• graalvm/setup-graalvm v1.3.6@7a1da54cb7fdef4ea19f6ecdfa9ecf59dc5a48fe
• ubuntu 24.04

.github/workflows/codeql.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/fossa.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac

.github/workflows/gradle-wrapper-validation.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a

.github/workflows/issue-management-feedback-label.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/issue-management-stale-action.yml

• actions/stale v10.0.0@3a9db7e6a41a89f618792c92c0e97cc736e1b13f

.github/workflows/javadoc-crawler.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a

.github/workflows/ossf-scorecard.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.30.3@192325c86100d080feab897ff886c34abd4c83a3

.github/workflows/owasp-dependency-check-daily.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/prepare-patch-release.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42

.github/workflows/prepare-release-branch.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42

.github/workflows/release.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42
• ubuntu 24.04

.github/workflows/reusable-markdown-link-check.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• lycheeverse/lychee-action v2.6.1@885c65f3dc543b57c898c8099f4e08c8afd178a2

.github/workflows/reusable-misspell-check.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/reusable-open-issue-on-failure.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/reusable-workflow-notification.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/survey-on-merged-pr.yml

• actions/create-github-app-token v2.1.4@67018539274d69449ef7c02e8e71183d1719ab42

.github/workflows/unsafe.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• gradle/actions v4.4.3@ed408507eac070d1f99cc633dbcf757c94c7933a

gradle

all/build.gradle.kts

animal-sniffer-signature/build.gradle.kts

• com.toasttab.android:gummy-bears-api-23 0.12.0

api/all/build.gradle.kts

api/build.gradle.kts

api/incubator/build.gradle.kts

api/incubator/gradle.properties

api/testing-internal/build.gradle.kts

bom-alpha/build.gradle.kts

bom-alpha/gradle.properties

bom/build.gradle.kts

build.gradle.kts

buildSrc/build.gradle.kts

• com.diffplug.spotless 7.2.1
• com.squareup.wire:wire-bom 5.4.0
• com.google.auto.value:auto-value-annotations 1.11.0
• com.diffplug.spotless:spotless-plugin-gradle 7.2.1
• com.gradle.develocity:com.gradle.develocity.gradle.plugin 4.2
• com.squareup:javapoet 1.13.0
• com.google.protobuf:protobuf-gradle-plugin 0.9.5
• gradle.plugin.io.morethan.jmhreport:gradle-jmh-report 0.9.6
• me.champeau.gradle:japicmp-gradle-plugin 0.4.6
• me.champeau.jmh:jmh-gradle-plugin 0.7.3
• net.ltgt.gradle:gradle-errorprone-plugin 4.3.0
• net.ltgt.gradle:gradle-nullaway-plugin 2.3.0
• org.jetbrains.kotlin:kotlin-gradle-plugin 2.2.20
• org.owasp:dependency-check-gradle 12.1.3
• ru.vyarus:gradle-animalsniffer-plugin 2.0.1

buildSrc/src/main/kotlin/io/opentelemetry/gradle/OtelBomExtension.kt

buildSrc/src/main/kotlin/io/opentelemetry/gradle/OtelJavaExtension.kt

buildSrc/src/main/kotlin/io/opentelemetry/gradle/OtelVersionClassPlugin.kt

buildSrc/src/main/kotlin/io/opentelemetry/gradle/ProtoFieldsWireHandler.kt

buildSrc/src/main/kotlin/io/opentelemetry/gradle/ProtoFieldsWireHandlerFactory.kt

buildSrc/src/main/kotlin/otel.animalsniffer-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.bom-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.errorprone-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.jacoco-conventions.gradle.kts

• jacoco 0.8.13

buildSrc/src/main/kotlin/otel.japicmp-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.java-conventions.gradle.kts

• checkstyle 11.0.1

buildSrc/src/main/kotlin/otel.jmh-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.protobuf-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.publish-conventions.gradle.kts

buildSrc/src/main/kotlin/otel.spotless-conventions.gradle.kts

common/build.gradle.kts

context/build.gradle.kts

custom-checks/build.gradle.kts

dependencyManagement/build.gradle.kts

• com.fasterxml.jackson:jackson-bom 2.20.0
• com.google.guava:guava-bom 33.5.0-jre
• com.google.protobuf:protobuf-bom 4.32.1
• com.squareup.okhttp3:okhttp-bom 5.1.0
• com.squareup.okio:okio-bom 3.16.0
• io.grpc:grpc-bom 1.75.0
• io.netty:netty-bom 4.2.6.Final
• io.zipkin.brave:brave-bom 6.3.0
• io.zipkin.reporter2:zipkin-reporter-bom 3.5.1
• org.assertj:assertj-bom 3.27.5
• org.testcontainers:testcontainers-bom 1.21.3
• org.snakeyaml:snakeyaml-engine 2.10
• org.junit.jupiter:junit-jupiter-api 5.13.4
• org.junit.jupiter:junit-jupiter-params 5.13.4
• com.linecorp.armeria:armeria 1.33.3
• com.linecorp.armeria:armeria-grpc 1.33.3
• com.linecorp.armeria:armeria-grpc-protocol 1.33.3
• com.linecorp.armeria:armeria-junit5 1.33.3
• com.google.auto.value:auto-value 1.11.0
• com.google.auto.value:auto-value-annotations 1.11.0
• com.google.errorprone:error_prone_annotations 2.41.0
• com.google.errorprone:error_prone_core 2.41.0
• com.google.errorprone:error_prone_test_helpers 2.41.0
• io.opencensus:opencensus-api 0.31.1
• io.opencensus:opencensus-impl-core 0.31.1
• io.opencensus:opencensus-impl 0.31.1
• io.opencensus:opencensus-exporter-metrics-util 0.31.1
• io.opencensus:opencensus-contrib-exemplar-util 0.31.1
• org.openjdk.jmh:jmh-core 1.37
• org.openjdk.jmh:jmh-generator-bytecode 1.37
• org.openjdk.jmh:jmh-generator-annprocess 1.37
• org.mockito:mockito-core 4.11.0
• org.mockito:mockito-junit-jupiter 4.11.0
• org.slf4j:slf4j-simple 2.0.17
• org.slf4j:jul-to-slf4j 2.0.17
• io.prometheus:prometheus-metrics-exporter-httpserver 1.3.10
• io.prometheus:prometheus-metrics-exposition-formats-no-protobuf 1.3.10
• javax.annotation:javax.annotation-api 1.3.2
• com.github.stefanbirkner:system-rules 1.19.0
• com.google.api.grpc:proto-google-common-protos 2.61.1
• com.google.code.findbugs:jsr305 3.0.2
• com.google.guava:guava-beta-checker 1.0
• com.sun.net.httpserver:http 20070405
• com.squareup.okhttp3:okhttp-jvm 5.1.0
• com.tngtech.archunit:archunit-junit5 1.4.1
• com.uber.nullaway:nullaway 0.12.10
• edu.berkeley.cs.jqf:jqf-fuzz 1.7
• eu.rekawek.toxiproxy:toxiproxy-java 2.1.11
• io.github.netmikey.logunit:logunit-jul 2.0.0
• io.jaegertracing:jaeger-client 1.8.1
• io.opentelemetry.contrib:opentelemetry-aws-xray-propagator 1.49.0-alpha
• io.opentelemetry.semconv:opentelemetry-semconv-incubating 1.37.0-alpha
• io.opentelemetry.proto:opentelemetry-proto 1.8.0-alpha
• io.opentracing:opentracing-api 0.33.0
• io.opentracing:opentracing-noop 0.33.0
• junit:junit 4.13.2
• nl.jqno.equalsverifier:equalsverifier 3.19.4
• org.awaitility:awaitility 4.3.0
• org.bouncycastle:bcpkix-jdk15on 1.70
• org.codehaus.mojo:animal-sniffer-annotations 1.24
• org.jctools:jctools-core 4.0.5
• org.junit-pioneer:junit-pioneer 1.9.1
• org.mock-server:mockserver-netty 5.15.0
• org.skyscreamer:jsonassert 1.5.3
• com.android.tools:desugar_jdk_libs 2.1.5

exporters/build.gradle.kts

exporters/common/build.gradle.kts

exporters/common/compile-stub/build.gradle.kts

exporters/logging-otlp/build.gradle.kts

exporters/logging/build.gradle.kts

exporters/otlp/all/build.gradle.kts

exporters/otlp/build.gradle.kts

exporters/otlp/common/build.gradle.kts

exporters/otlp/profiles/build.gradle.kts

exporters/otlp/profiles/gradle.properties

exporters/otlp/testing-internal/build.gradle.kts

exporters/prometheus/build.gradle.kts

exporters/prometheus/gradle.properties

exporters/sender/build.gradle.kts

exporters/sender/grpc-managed-channel/build.gradle.kts

exporters/sender/jdk/build.gradle.kts

exporters/sender/okhttp/build.gradle.kts

exporters/zipkin/build.gradle.kts

extensions/build.gradle.kts

extensions/kotlin/build.gradle.kts

extensions/trace-propagators/build.gradle.kts

gradle.properties

integration-tests/build.gradle.kts

integration-tests/graal-incubating/build.gradle.kts

integration-tests/graal/build.gradle.kts

integration-tests/otlp/build.gradle.kts

integration-tests/tracecontext/build.gradle.kts

javadoc-crawler/build.gradle.kts

• org.assertj:assertj-core 3.27.5

opencensus-shim/build.gradle.kts

opencensus-shim/gradle.properties

opentracing-shim/build.gradle.kts

• io.opentracing:opentracing-noop 0.33.0

perf-harness/build.gradle.kts

sdk-extensions/autoconfigure-spi/build.gradle.kts

sdk-extensions/autoconfigure/build.gradle.kts

sdk-extensions/build.gradle.kts

sdk-extensions/incubator/build.gradle.kts

sdk-extensions/incubator/gradle.properties

sdk-extensions/jaeger-remote-sampler/build.gradle.kts

sdk/all/build.gradle.kts

sdk/build.gradle.kts

sdk/common/build.gradle.kts

sdk/logs/build.gradle.kts

sdk/metrics/build.gradle.kts

sdk/testing/build.gradle.kts

sdk/trace-shaded-deps/build.gradle.kts

sdk/trace/build.gradle.kts

settings.gradle.kts

• com.gradleup.shadow 9.1.0
• com.gradle.develocity 4.2
• de.undercouch.download 5.6.0
• org.jsonschema2pojo 1.2.2
• io.github.gradle-nexus.publish-plugin 2.0.0
• org.graalvm.buildtools.native 0.10.6
• org.gradle.toolchains.foojay-resolver-convention 1.0.0

testing-internal/build.gradle.kts

version.gradle.kts

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 9.1.0

regex

.github/workflows/build.yml

• java 24
• java 24
• java 24

exporters/prometheus/src/test/java/io/opentelemetry/exporter/prometheus/CollectorIntegrationTest.java

• otel/opentelemetry-collector-contrib 0.135.0@sha256:89107a3a8f4636a396927edf7025bb9614b8da2d92f4cc3f43109e8d115736e2

integration-tests/otlp/src/main/java/io/opentelemetry/integrationtest/OtlpExporterIntegrationTest.java

• otel/opentelemetry-collector-contrib 0.135.0@sha256:89107a3a8f4636a396927edf7025bb9614b8da2d92f4cc3f43109e8d115736e2

perf-harness/src/test/java/io/opentelemetry/perf/OtlpPipelineStressTest.java

• otel/opentelemetry-collector-contrib 0.135.0@sha256:89107a3a8f4636a396927edf7025bb9614b8da2d92f4cc3f43109e8d115736e2

sdk/trace/src/jmh/java/io/opentelemetry/sdk/trace/ExporterBenchmark.java

• otel/opentelemetry-collector-contrib 0.135.0@sha256:89107a3a8f4636a396927edf7025bb9614b8da2d92f4cc3f43109e8d115736e2

sdk/trace/src/jmh/java/io/opentelemetry/sdk/trace/SpanPipelineBenchmark.java

• otel/opentelemetry-collector-contrib 0.135.0@sha256:89107a3a8f4636a396927edf7025bb9614b8da2d92f4cc3f43109e8d115736e2

---

• Check this box to trigger a request for Renovate to run again on this repository