Skip to content

chore(deps): Bump the opentelemetry group across 1 directory with 5 updates - #28547

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/opentelemetry-50e92507e5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/opentelemetry-50e92507e5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the opentelemetry group with 5 updates in the / directory:

Package From To
io.opentelemetry:opentelemetry-bom 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk 1.66.0 1.67.0
io.opentelemetry:opentelemetry-api 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk-testing 1.66.0 1.67.0
io.opentelemetry:opentelemetry-bom-alpha 1.66.0-alpha 1.67.0-alpha
io.opentelemetry:opentelemetry-sdk 1.66.0 1.67.0
io.opentelemetry:opentelemetry-api 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk-testing 1.66.0 1.67.0

Updates io.opentelemetry:opentelemetry-bom from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk-testing's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-bom-alpha from 1.66.0-alpha to 1.67.0-alpha

Release notes

Sourced from io.opentelemetry:opentelemetry-bom-alpha's releases.

Version 1.66.0

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)
  • Prometheus: Remove default host log warning in PrometheusHttpServerBuilder (#8679)
  • Prometheus: Align UCUM byte unit conversions with the specification table (#8752)

Extensions

  • BREAKING Declarative config: Rename generated model POJO setters from with<Prop> to set<Prop> (#8742)
  • Declarative config: Resolve experimental properties on stable APIs in generated model POJOs (#8654)
  • Declarative config: Fix inverted scope_info_enabled and target_info_enabled flags in the Prometheus component provider (#8750)
  • Declarative config: Support output_stream in otlp_file/development (#8676)
  • Incubator: Add toString to ComposableAnnotatingSampler (#8645)

Project tooling

  • Remediate zizmor findings in GitHub Actions workflows (#8592)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom-alpha's changelog.

Changelog

Unreleased

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)

... (truncated)

Commits

Updates io.opentelemetry:opentelemetry-sdk from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound al...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 27, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

  • First-time contributors require MANUAL approval for the GitHub Actions to run
  • You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
  • You can label PRs using skip-tests and test-dependents to fine-tune the checks executed by this PR.
  • Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

@github-actions

github-actions Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

🧪 CI tested the following changed modules:

  • parent

✅ POM dependency changes: targeted tests included

Changed properties: opentelemetry-alpha-version,opentelemetry-version

Modules affected by dependency changes (5)
  • :camel-opentelemetry2
  • :camel-opentelemetry
  • :camel-opentelemetry-metrics
  • :camel-micrometer-observability
  • :camel-observation

🔬 Scalpel shadow comparison — Scalpel: 17 of 712 tested, 3 compile-only — current: 0 all tested

Maveniverse Scalpel detected 17 affected modules (current approach: 0).

Changed properties: opentelemetry-alpha-version, opentelemetry-version

Changed managed dependencies: io.opentelemetry:opentelemetry-common, io.opentelemetry:opentelemetry-context, io.opentelemetry:opentelemetry-opentracing-shim, io.opentelemetry:opentelemetry-api, io.opentelemetry:opentelemetry-exporter-common, io.opentelemetry:opentelemetry-exporter-logging, io.opentelemetry:opentelemetry-exporter-logging-otlp, io.opentelemetry:opentelemetry-extension-kotlin, io.opentelemetry:opentelemetry-extension-trace-propagators, io.opentelemetry:opentelemetry-sdk, io.opentelemetry:opentelemetry-sdk-common, io.opentelemetry:opentelemetry-sdk-logs, io.opentelemetry:opentelemetry-sdk-metrics, io.opentelemetry:opentelemetry-sdk-testing, io.opentelemetry:opentelemetry-sdk-trace, io.opentelemetry:opentelemetry-sdk-extension-autoconfigure, io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi, io.opentelemetry:opentelemetry-sdk-extension-jaeger-remote-sampler, io.opentelemetry:opentelemetry-exporter-otlp, io.opentelemetry:opentelemetry-exporter-otlp-common, io.opentelemetry:opentelemetry-exporter-sender-grpc-managed-channel, io.opentelemetry:opentelemetry-exporter-sender-jdk, io.opentelemetry:opentelemetry-exporter-sender-okhttp, io.opentelemetry:opentelemetry-opencensus-shim, io.opentelemetry:opentelemetry-api-incubator, io.opentelemetry:opentelemetry-exporter-prometheus, io.opentelemetry:opentelemetry-sdk-profiles, io.opentelemetry:opentelemetry-sdk-extension-declarative-config, io.opentelemetry:opentelemetry-sdk-extension-incubator, io.opentelemetry:opentelemetry-exporter-otlp-profiles

Skip-tests mode would test 17 modules (7 direct + 0 downstream), skip tests for 3 (generated code, meta-modules)

⚠️ Modules only in Scalpel (17)
  • camel-jbang-export
  • camel-jbang-mcp
  • camel-jbang-plugin-mcp
  • camel-jbang-plugin-tui
  • camel-jbang-plugin-validate
  • camel-jpa
  • camel-launcher-container
  • camel-micrometer-observability
  • camel-observability-services
  • camel-observation
  • camel-opentelemetry
  • camel-opentelemetry-metrics
  • camel-opentelemetry2
  • camel-test-infra-all
  • camel-test-infra-jaeger
  • camel-yaml-dsl-validator
  • camel-yaml-dsl-validator-maven-plugin
Modules Scalpel would test (17)
  • camel-jbang-export ← depends on affected reactor module org.apache.camel:camel-catalog
  • camel-jbang-mcp ← depends on affected reactor module org.apache.camel:camel-yaml-dsl-validator
  • camel-jbang-plugin-mcp ← depends on affected reactor module org.apache.camel:camel-jbang-core
  • camel-jbang-plugin-tui ← depends on affected reactor module org.apache.camel:camel-yaml-dsl-validator
  • camel-jbang-plugin-validate ← depends on affected reactor module org.apache.camel:camel-yaml-dsl-validator
  • camel-jpa ← effective property camel.surefire.fork.additional-vmargs
  • camel-launcher-container ← depends on affected reactor module org.apache.camel:camel-launcher
  • camel-micrometer-observability ← effective dep io.opentelemetry:opentelemetry-sdk, effective dep io.opentelemetry:opentelemetry-api, effective dep io.opentelemetry:opentelemetry-sdk-testing
  • camel-observability-services ← depends on affected reactor module org.apache.camel:camel-opentelemetry2
  • camel-observation ← effective dep io.opentelemetry:opentelemetry-sdk-testing
  • camel-opentelemetry ← effective dep io.opentelemetry:opentelemetry-sdk, effective dep io.opentelemetry:opentelemetry-api, effective dep io.opentelemetry:opentelemetry-context, effective dep io.opentelemetry:opentelemetry-sdk-testing, effective dep io.opentelemetry:opentelemetry-sdk-extension-incubator
  • camel-opentelemetry-metrics ← effective dep io.opentelemetry:opentelemetry-sdk, effective dep io.opentelemetry:opentelemetry-sdk-testing, effective dep io.opentelemetry:opentelemetry-sdk-extension-autoconfigure, effective dep io.opentelemetry:opentelemetry-exporter-logging
  • camel-opentelemetry2 ← effective dep io.opentelemetry:opentelemetry-sdk, effective dep io.opentelemetry:opentelemetry-sdk-testing
  • camel-test-infra-all ← depends on affected reactor module org.apache.camel:camel-test-infra-jaeger
  • camel-test-infra-jaeger ← effective dep io.opentelemetry:opentelemetry-sdk, effective dep io.opentelemetry:opentelemetry-exporter-otlp
  • camel-yaml-dsl-validator ← depends on affected reactor module org.apache.camel:camel-catalog
  • camel-yaml-dsl-validator-maven-plugin ← depends on affected reactor module org.apache.camel:camel-yaml-dsl-validator
Modules with tests skipped (3)
  • camel-itest
  • camel-yaml-dsl
  • camel-yaml-dsl-deserializers

ℹ️ Shadow mode — Scalpel observes but does not affect test execution. Learn more

All tested modules (45 modules, 1m 6s total)

Total reactor time: 1m 6s

Module Duration Status
Camel :: Opentelemetry Metrics 37.0s SUCCESS
Camel :: OpenTelemetry (deprecated) 25.9s SUCCESS
Camel :: Micrometer :: Observation (deprecated) 2.5s FAILURE
Camel :: Parent 0.9s SUCCESS
Camel :: All Components Sync point n/a
Camel :: Assembly n/a
Camel :: Catalog :: Camel Catalog n/a
Camel :: Catalog :: Camel Report Maven Plugin n/a
Camel :: Catalog :: Camel Route Parser n/a
Camel :: Catalog :: Console n/a
Camel :: Catalog :: Dummy Component n/a
Camel :: Catalog :: Maven n/a
Camel :: Catalog :: Suggest (deprecated) n/a
Camel :: Component DSL n/a
Camel :: Coverage n/a
Camel :: Docs n/a
Camel :: Endpoint DSL n/a
Camel :: Endpoint DSL :: Support n/a
Camel :: Integration Tests n/a
Camel :: JBang :: Core n/a
Camel :: JBang :: Export n/a
Camel :: JBang :: Integration tests n/a
Camel :: JBang :: MCP n/a
Camel :: JBang :: Main n/a
Camel :: JBang :: Plugin :: Edit n/a
Camel :: JBang :: Plugin :: Generate n/a
Camel :: JBang :: Plugin :: Kubernetes n/a
Camel :: JBang :: Plugin :: MCP n/a
Camel :: JBang :: Plugin :: TUI n/a
Camel :: JBang :: Plugin :: Testing n/a
Camel :: JBang :: Plugin :: Validate n/a
Camel :: JPA n/a
Camel :: Kamelet Main n/a
Camel :: Launcher n/a
Camel :: Launcher :: Container n/a
Camel :: Micrometer :: Observability 2 n/a
Camel :: Observability Services n/a
Camel :: Opentelemetry 2 n/a
Camel :: Test Infra :: All test services n/a
Camel :: Test Infra :: Jaeger n/a
Camel :: YAML DSL n/a
Camel :: YAML DSL :: Deserializers n/a
Camel :: YAML DSL :: Maven Plugins n/a
Camel :: YAML DSL :: Validator n/a
Camel :: YAML DSL :: Validator Maven Plugin n/a

Top 20 slowest modules:

  • Camel :: Opentelemetry Metrics (37.0s)
  • Camel :: OpenTelemetry (deprecated) (25.9s)
  • Camel :: Micrometer :: Observation (deprecated) (2.5s)
  • Camel :: Parent (0.9s)

⚙️ View full build and test results

@davsclaus davsclaus left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for keeping OpenTelemetry current. Most of 1.67.0 is safe for us: no removed public API, still Java 8 bytecode, and camel-opentelemetry, camel-opentelemetry2 and camel-opentelemetry-metrics all pass in CI. But build (21, false) fails because of this bump. Every test in camel-observation fails with NoClassDefFoundError: io/opentelemetry/api/internal/ConfigUtil.

Root cause. In 1.67.0, ConfigUtil moved out of opentelemetry-api (io.opentelemetry.api.internal.ConfigUtil was removed) into the new opentelemetry-common jar (io.opentelemetry.common.impl.ConfigUtil). camel-observation pins only opentelemetry-sdk-testing to ${opentelemetry-version} (components/camel-observation/pom.xml:78-82). It gets the rest of the SDK through micrometer-tracing-integration-test 1.7.2, which pins OpenTelemetry 1.62.0. So the test classpath now has opentelemetry-api 1.67.0 next to opentelemetry-sdk-common and sdk-trace 1.62.0. The 1.62.0 ExceptionAttributeResolver (called from SdkTracerProvider.builder(), CamelMicrometerObservationTestSupport.java:101) still links against the removed class. Up to 1.66.0, both versions had ConfigUtil in the api jar, which is why this mix used to work.

Suggested fix: let the OpenTelemetry BOM align the whole family in camel-observation's test classpath, as camel-opentelemetry already does:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>io.opentelemetry</groupId>
            <artifactId>opentelemetry-bom</artifactId>
            <version>${opentelemetry-version}</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

Another option is to declare opentelemetry-sdk and opentelemetry-api at test scope, as camel-micrometer-observability does. camel-observation's main code depends only on micrometer-tracing, so this only affects tests and has no effect for users.

Not tested. Because of fail-fast, camel-micrometer-observability and camel-test-infra-jaeger were skipped. From the pom, camel-micrometer-observability should resolve the 1.67.0 SDK, because its explicit opentelemetry-sdk is declared before micrometer-tracing-bridge-otel. The 1.7.2 bridge does not reference ConfigUtil or the removed SemConvAttributes. Still, please check that module's result on the re-run.

[Nit] Deprecation, no action needed. 1.67.0 deprecates TextMapGetter.keys() and gives it a default implementation. Our overrides in OpenTelemetryTracer.java:209 (camel-opentelemetry2) and OpenTelemetryGetter.java:32 (camel-opentelemetry) now compile with a deprecation warning. Let's keep them for now: keys() is still abstract in the older OpenTelemetry API versions that users may have through the Spring Boot or Quarkus BOMs.

This needs a fix commit on this branch, since Dependabot rebases won't fix the pom.


Reviewed with Claude Code on behalf of davsclaus. This review was generated by an AI agent and may contain inaccuracies; please verify all suggestions before applying.

@dependabot dependabot Bot changed the title Bump the opentelemetry group with 5 updates Bump the opentelemetry group across 1 directory with 5 updates Oct 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/opentelemetry-50e92507e5 branch 2 times, most recently from e17be44 to 309b315 Compare October 29, 2026 06:58
…pdates

Bumps the opentelemetry group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-bom-alpha](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0-alpha` | `1.67.0-alpha` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |



Updates `io.opentelemetry:opentelemetry-bom` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-bom-alpha` from 1.66.0-alpha to 1.67.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java/commits)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

---
updated-dependencies:
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-bom-alpha
  dependency-version: 1.67.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title Bump the opentelemetry group across 1 directory with 5 updates chore(deps): Bump the opentelemetry group across 1 directory with 5 updates Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/opentelemetry-50e92507e5 branch from 309b315 to 6f64f85 Compare October 30, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core-build-and-dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant