Commit Graph

8769 Commits

Author SHA1 Message Date
dependabot[bot] 53353acf03
Bump org.springframework.boot:spring-boot-starter-web from 3.0.2 to 3.0.3 (#7896)
Bumps
[org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot)
from 3.0.2 to 3.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-starter-web's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.3</h2>
<h2>🐞 Bug Fixes</h2>
<ul>
<li>ClassNotFoundException during AOT processing of Logback XML that
references a variable when defining a component's class <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34336">#34336</a></li>
<li>Logback configuration errors are not reported when running as a
native image <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34315">#34315</a></li>
<li>Dependency management for Spring LDAP includes
spring-ldap-core-tiger which no longer exists <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34299">#34299</a></li>
<li>Kotlin ConfigurationProperties default values are not picked up when
nativeRun is used <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34157">#34157</a></li>
<li>Maven Plugin's PropertiesMergingResourceTransformer closes
InputStream when it should not do so <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34072">#34072</a></li>
<li>Actuator Health web endpoint broken with Gson and Java 17 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34070">#34070</a></li>
<li>Manifests of jars built with Gradle do not have a Implementation
entries <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34059">#34059</a></li>
<li>Spies are not reset after test execution when using
<code>@SpyBean</code> <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34044">#34044</a></li>
<li>Using devtools with Reactive application results in slower restarts
<a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34036">#34036</a></li>
<li>spring-boot-dependencies manages mysql:mysql-connector-java which no
longer exists <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34021">#34021</a></li>
<li>Dependency management for Mongo's Java Driver is incomplete <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34019">#34019</a></li>
<li>jOOQ DefaultConfiguration does not use TransactionProvider <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33979">#33979</a></li>
<li>ObservationFilter beans are not registered automatically <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33968">#33968</a></li>
<li>Properties Migrator does not detect properties of Map type that are
marked as deprecated <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33963">#33963</a></li>
<li>Dependency management for some Angus Mail modules uses the wrong
artifact ID <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33947">#33947</a></li>
<li>ElasticsearchClientAutoConfiguration causes global ObjectMapper to
be overwritten <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33426">#33426</a></li>
</ul>
<h2>📔 Documentation</h2>
<ul>
<li>Updated documentation for <code>@ConfigurationProperties</code> bean
naming rules <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34192">#34192</a></li>
<li>Document additional configuration that is required for
spring.mvc.throw-exception-if-no-handler-found=true to be effective <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34190">#34190</a></li>
<li>Use Maven Central for release downloads in CLI installation
documentation <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34161">#34161</a></li>
<li>Update Customizing Sanitization documentation as built-in key-based
sanitization is no longer performed <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/34051">#34051</a></li>
<li>Add Redis application properties example <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34041">#34041</a></li>
<li>Restore &quot;Use Jedis Instead of Lettuce&quot; how-to
documentation <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33995">#33995</a></li>
<li>Actuator section is missing from documentation overview <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33933">#33933</a></li>
<li>Add Javadoc since to OperationParameter.getAnnotation() <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33919">#33919</a></li>
</ul>
<h2>🔨 Dependency Upgrades</h2>
<ul>
<li>Upgrade to Byte Buddy 1.12.23 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34255">#34255</a></li>
<li>Upgrade to Caffeine 3.1.4 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34256">#34256</a></li>
<li>Upgrade to Dropwizard Metrics 4.2.16 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34258">#34258</a></li>
<li>Upgrade to Glassfish JAXB 4.0.2 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34259">#34259</a></li>
<li>Upgrade to Groovy 4.0.9 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34260">#34260</a></li>
<li>Upgrade to Hibernate 6.1.7.Final <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34261">#34261</a></li>
<li>Upgrade to Jackson Bom 2.14.2 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34262">#34262</a></li>
<li>Upgrade to Jaybird 4.0.9.java11 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34263">#34263</a></li>
<li>Upgrade to Jersey 3.1.1 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34264">#34264</a></li>
<li>Upgrade to jOOQ 3.17.8 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34265">#34265</a></li>
<li>Upgrade to Lettuce 6.2.3.RELEASE <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34266">#34266</a></li>
<li>Upgrade to Lombok 1.18.26 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34267">#34267</a></li>
<li>Upgrade to Micrometer 1.10.4 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34148">#34148</a></li>
<li>Upgrade to Micrometer Tracing 1.0.2 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34160">#34160</a></li>
<li>Upgrade to Native Build Tools Plugin 0.9.20 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34268">#34268</a></li>
<li>Upgrade to Neo4j Java Driver 5.4.0 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34344">#34344</a></li>
<li>Upgrade to Netty 4.1.89.Final <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/34269">#34269</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e0b5653031"><code>e0b5653</code></a>
Release v3.0.3</li>
<li><a
href="c42d7804ff"><code>c42d780</code></a>
Upgrade to Spring WS 4.0.2</li>
<li><a
href="15097e1e2d"><code>15097e1</code></a>
Upgrade to Spring Batch 5.0.1</li>
<li><a
href="525cba1b6f"><code>525cba1</code></a>
Upgrade to Neo4j Java Driver 5.4.0</li>
<li><a
href="f92b6ae542"><code>f92b6ae</code></a>
Merge branch '2.7.x' into 3.0.x</li>
<li><a
href="e871676236"><code>e871676</code></a>
Next development version (v2.7.10-SNAPSHOT)</li>
<li><a
href="40ec064de4"><code>40ec064</code></a>
Merge branch '2.7.x' into 3.0.x</li>
<li><a
href="c7dad423e4"><code>c7dad42</code></a>
Add .git-blame-ignore-revs for reformat commit</li>
<li><a
href="0b15962aca"><code>0b15962</code></a>
Merge branch '2.7.x' into 3.0.x</li>
<li><a
href="a5902d7a00"><code>a5902d7</code></a>
Update copyright year of changed files</li>
<li>Additional commits viewable in <a
href="https://github.com/spring-projects/spring-boot/compare/v3.0.2...v3.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.springframework.boot:spring-boot-starter-web&package-manager=gradle&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-24 14:53:22 +02:00
Bryan Herbst ba9df3fea8
Make RxJava2 instrumentation Android-friendly (#7895)
Resolves #7894

Replace `MethodHandle` with older `java.lang.reflect.Field`, which is
supported on older Java versions.

Also enables animal sniffer for the RxJava2 instrumentation to prevent
regression.

---------

Co-authored-by: opentelemetrybot <107717825+opentelemetrybot@users.noreply.github.com>
2023-02-24 13:46:13 +02:00
dependabot[bot] cb095e6d0a
Bump me.champeau.jmh:jmh-gradle-plugin from 0.6.8 to 0.7.0 (#7897)
Bumps me.champeau.jmh:jmh-gradle-plugin from 0.6.8 to 0.7.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=me.champeau.jmh:jmh-gradle-plugin&package-manager=gradle&previous-version=0.6.8&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-24 13:45:35 +02:00
Lauri Tulmin 64eb58633f
Fix jaxrs annotation instrumentation on openliberty (#7890)
Hopefully resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7870
Jax-rs annotation instrumentation is only enabled when jax-rs api is
found in the class loader. This check does a `ClassLoader.getResource`
call for the resource name corresponding to class
`javax.ws.rs.container.AsyncResponse`. As far as I understand this
particular class is used only because it was added in jax-rs 2.0, any
other class added in jax-rs 2.0 could be used instead of it. On
openliberty we fail to find this class because it should be resolved
through bundle dynamic imports but we disable looking into dynamic
imports in
https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/instrumentation/internal/internal-eclipse-osgi-3.6/javaagent/src/main/java/io/opentelemetry/javaagent/instrumentation/internal/osgi/EclipseOsgiInstrumentation.java
when we do the class presence check. Using a class in `javax.ws.rs.core`
package seems to work better as the import for that package is already
resolved by the time we make the `getResource` call.
2023-02-24 13:00:11 +02:00
Lauri Tulmin cbc616cbff
Fix kotlin coroutine context propagation (#7879)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7837
`org.jetbrains.kotlinx:kotlinx-coroutines-core:1.6.1` adds a second
`newCoroutineContext` that we shouldn't instrument. When we instrument
it the order of
[`KotlinContextElement`](https://github.com/open-telemetry/opentelemetry-java/blob/main/extensions/kotlin/src/main/java/io/opentelemetry/extension/kotlin/KotlinContextElement.java)
and user added `ThreadContextElement` gets reversed. If user added
`ThreadContextElement` changes opentelemetry context then these changes
will get overwritten by `KotlinContextElement`.
2023-02-24 12:31:43 +02:00
Lauri Tulmin fe263edecf
Fix vaadin14 latest dep test (#7893)
Looks similar to what we had for vaadin 16 recently. Pinning
https://www.npmjs.com/package/@types/node to 18.11.9
2023-02-23 20:39:08 -08:00
jason plumb 7e187f78e7
Add additional groovy classloaders to ignore list. (#7460)
Groovy apps that parse a lot of scripts can generate a lot of
classloaders that will ultimately end up causing the agent to cache a
LOT of memory. For example, some java code that uses the Gremlin groovy
script engine to dynamically create and execute scripts can reproduce
this:

```
    GremlinGroovyScriptEngine engine = new GremlinGroovyScriptEngine();
    Bindings bindings = new SimpleBindings();
    TinkerGraph graph = TinkerGraph.open();
    GraphTraversalSource g = graph.traversal();
    bindings.put("g", g);
    for (int i = 0; i < 100000; i++) {
      engine.eval("g.V(" + i + ")", bindings);
      if(i % 250 == 0) System.out.println("Iteration " + i);
    }
```

I have manually confirmed that ignoring the groovy classloaders (in this
PR) prevent the agent from exploding the cache and holding onto memory.
I could use another brain in deciding if there could be other unintended
consequences.
2023-02-23 09:39:54 -08:00
Phil fad7b24253
Add Jodd-Http instrumentation (#7868)
This PR resolves #7629 

This adds javaagent instrumentation for the
[jodd-http](https://http.jodd.org/) `HttpRequest`.
It creates `Http Client Spans` and `Http Client Metrics`, the lowest
supported version is `org.jodd:jodd-http:4.2.0` (most recent: `6.3.0`),
since this is the first version of the library supporting java 8, having
follow-redirect capability and `HttpRequest#overwriteHeader()` method.
The instrumented method's signature and return type `HttpRequest#send()`
has not been modified since, and therefore the instrumentation works for
all `jodd-http` versions above `4.2.0`.

Since this is my first contribution/instrumentation, I orientated myself
on the `apache-httpclient-5.0` instrumentation, but obviously I would be
glad to get some feedback on this

---------

Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2023-02-23 15:54:13 +00:00
Trask Stalnaker 6cb00d3de0
Fix sdk version in release notes (#7880) 2023-02-23 12:38:54 +01:00
Peter Findeisen 98653ef075
7883 ClassCastException when using -Dotel.jmx.target.system=tomcat (#7884)
Using "1" to specify units of plain cardinality.
2023-02-23 12:28:10 +01:00
dependabot[bot] 7062ee4910
Bump io.opentelemetry.contrib:opentelemetry-aws-xray-propagator from 1.22.0-alpha to 1.23.0-alpha (#7881)
Bumps
[io.opentelemetry.contrib:opentelemetry-aws-xray-propagator](https://github.com/open-telemetry/opentelemetry-java-contrib)
from 1.22.0-alpha to 1.23.0-alpha.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-java-contrib/releases">io.opentelemetry.contrib:opentelemetry-aws-xray-propagator's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.22.0</h2>
<p>This release targets the OpenTelemetry SDK 1.22.0.</p>
<h3>JFR streaming</h3>
<ul>
<li>Add buffer handlers and implement buffer metrics (<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/650">#650</a>)</li>
<li>Implement GC duration metric (<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/653">#653</a>)</li>
<li>Implement memory metrics (<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/652">#652</a>)</li>
</ul>
<h3>Prometheus client bridge - New 🌟</h3>
<p>This module can be used to bridge OpenTelemetry metrics into the
<code>prometheus-simpleclient</code> library.</p>
<h3>🙇 Thank you</h3>
<p>This release was possible thanks to the following contributors who
shared their brilliant ideas and awesome pull requests:</p>
<p><a href="https://github.com/anosek-an"><code>@​anosek-an</code></a>
<a href="https://github.com/jack-berg"><code>@​jack-berg</code></a>
<a href="https://github.com/jeanbisutti"><code>@​jeanbisutti</code></a>
<a href="https://github.com/jkwatson"><code>@​jkwatson</code></a>
<a href="https://github.com/kittylyst"><code>@​kittylyst</code></a>
<a
href="https://github.com/mateuszrzeszutek"><code>@​mateuszrzeszutek</code></a>
<a
href="https://github.com/roberttoyonaga"><code>@​roberttoyonaga</code></a>
<a href="https://github.com/trask"><code>@​trask</code></a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-java-contrib/blob/main/CHANGELOG.md">io.opentelemetry.contrib:opentelemetry-aws-xray-propagator's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>Unreleased</h2>
<h2>Version 1.23.0 (2023-02-22)</h2>
<h3>JFR streaming</h3>
<ul>
<li>JFR features can be enabled and disabled
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/709">#709</a>)</li>
<li>Generate JFR telemetry table
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/715">#715</a>)</li>
</ul>
<h3>Resource providers</h3>
<ul>
<li>Fix and enhance resource detection logging.
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/711">#711</a>)</li>
</ul>
<h3>Samplers</h3>
<ul>
<li>Allow providing a custom sampler as an option for the
RuleBasedRoutingSampler
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/710">#710</a>)</li>
</ul>
<h2>Version 1.22.0 (2023-01-17)</h2>
<h3>JFR streaming</h3>
<ul>
<li>Add buffer handlers and implement buffer metrics
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/650">#650</a>)</li>
<li>Implement GC duration metric
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/653">#653</a>)</li>
<li>Implement memory metrics
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/652">#652</a>)</li>
</ul>
<h3>Prometheus client bridge - New 🌟</h3>
<p>This module can be used to bridge OpenTelemetry metrics into the
<code>prometheus-simpleclient</code> library.</p>
<h2>Version 1.21.0 (2022-12-15)</h2>
<h3>JFR streaming</h3>
<ul>
<li>Update handlers in jfr-streaming to match spec
(<a
href="https://github-redirect.dependabot.com/open-telemetry/opentelemetry-java-contrib/pull/616">#616</a>)</li>
</ul>
<h2>Version 1.20.1 (2022-11-22)</h2>
<h3>🛠️ Bug fixes</h3>
<ul>
<li>Previously targeted OpenTelemetry Instrumentation version had never
been updated to target</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/open-telemetry/opentelemetry-java-contrib/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.opentelemetry.contrib:opentelemetry-aws-xray-propagator&package-manager=gradle&previous-version=1.22.0-alpha&new-version=1.23.0-alpha)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: opentelemetrybot <107717825+opentelemetrybot@users.noreply.github.com>
2023-02-23 12:22:57 +01:00
Gregor Zeitlinger 78e459efa8
fix JMX usage examples (#7877)
If the unit is a number, there's a ClassCastException.

However, I'm not sure if updating the documentation is the right fix

- `1` is also used in some internal config files - e.g.
[tomcat](4db65b6d1f/instrumentation/jmx-metrics/javaagent/src/main/resources/jmx/rules/tomcat.yaml (L4))
- it's an incompatible change for users, such as myself
2023-02-22 15:49:11 -08:00
dependabot[bot] 2e7b61ae42
Bump io.github.gradle-nexus.publish-plugin from 1.1.0 to 1.2.0 (#7882) 2023-02-22 15:45:44 -08:00
Felix Wong 5845d981e1
Add Open Liberty 21.0.0.12 and 22.0.0.12 (#7878)
Add newer Open Liberty images 21.0.0.12 and 22.0.0.12.
2023-02-22 13:44:22 -08:00
Aaron Ai 8a7e8a8ca2
Replace InternalLogger of RocketMQ by Slf4j Logger (#7873)
Fixes #7872
2023-02-22 09:38:19 +02:00
dependabot[bot] 335e36d6e4
Bump org.apache.logging.log4j:log4j-bom from 2.19.0 to 2.20.0 (#7869) 2023-02-22 00:29:25 +00:00
Peter Findeisen 630f7513f6
7706 Handle JMX MBean attributes with embedded dots (#7841)
Allowing to use backslash as an escape character within MBean attribute
names.
2023-02-21 12:05:19 -08:00
Lauri Tulmin 85c541ef92
Implement kafka client id and consumer id attributes (#7860)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7771
Adds `messaging.consumer_id` and `messaging.kafka.client_id` attributes
to kafka spans.
2023-02-21 07:31:28 -08:00
dependabot[bot] 4d202ba7e9
Bump byteBuddyVersion from 1.13.0 to 1.14.0 (#7862)
Bumps `byteBuddyVersion` from 1.13.0 to 1.14.0.
Updates `net.bytebuddy:byte-buddy` from 1.13.0 to 1.14.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">net.bytebuddy:byte-buddy's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.14.0</h2>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">net.bytebuddy:byte-buddy's
changelog</a>.</em></p>
<blockquote>
<h3>18. February 2023: version 1.14.0</h3>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="00da41ec54"><code>00da41e</code></a>
[maven-release-plugin] prepare release byte-buddy-1.14.0</li>
<li><a
href="c601a7886a"><code>c601a78</code></a>
[release] Release new version</li>
<li><a
href="102ee25440"><code>102ee25</code></a>
Avoid test execution on Java 7.</li>
<li><a
href="3b5f4dcb8a"><code>3b5f4dc</code></a>
Remove unused packages.</li>
<li><a
href="b42f78b2a5"><code>b42f78b</code></a>
Add scheme part to URI.</li>
<li><a
href="d94d66a18c"><code>d94d66a</code></a>
Add scheme part to URI.</li>
<li><a
href="aaa18f29c9"><code>aaa18f2</code></a>
Adjust expectation for dynamic lambda invocation.</li>
<li><a
href="0f3bd5f2e6"><code>0f3bd5f</code></a>
Add hints for spotbugs.</li>
<li><a
href="c2242c7f3c"><code>c2242c7</code></a>
fix javadoc.</li>
<li><a
href="0a2e4ea5d2"><code>0a2e4ea</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1407">#1407</a>
from capthua/master</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.13.0...byte-buddy-1.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `net.bytebuddy:byte-buddy-dep` from 1.13.0 to 1.14.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">net.bytebuddy:byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.14.0</h2>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">net.bytebuddy:byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h3>18. February 2023: version 1.14.0</h3>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="00da41ec54"><code>00da41e</code></a>
[maven-release-plugin] prepare release byte-buddy-1.14.0</li>
<li><a
href="c601a7886a"><code>c601a78</code></a>
[release] Release new version</li>
<li><a
href="102ee25440"><code>102ee25</code></a>
Avoid test execution on Java 7.</li>
<li><a
href="3b5f4dcb8a"><code>3b5f4dc</code></a>
Remove unused packages.</li>
<li><a
href="b42f78b2a5"><code>b42f78b</code></a>
Add scheme part to URI.</li>
<li><a
href="d94d66a18c"><code>d94d66a</code></a>
Add scheme part to URI.</li>
<li><a
href="aaa18f29c9"><code>aaa18f2</code></a>
Adjust expectation for dynamic lambda invocation.</li>
<li><a
href="0f3bd5f2e6"><code>0f3bd5f</code></a>
Add hints for spotbugs.</li>
<li><a
href="c2242c7f3c"><code>c2242c7</code></a>
fix javadoc.</li>
<li><a
href="0a2e4ea5d2"><code>0a2e4ea</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1407">#1407</a>
from capthua/master</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.13.0...byte-buddy-1.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `net.bytebuddy:byte-buddy-agent` from 1.13.0 to 1.14.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">net.bytebuddy:byte-buddy-agent's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.14.0</h2>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">net.bytebuddy:byte-buddy-agent's
changelog</a>.</em></p>
<blockquote>
<h3>18. February 2023: version 1.14.0</h3>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="00da41ec54"><code>00da41e</code></a>
[maven-release-plugin] prepare release byte-buddy-1.14.0</li>
<li><a
href="c601a7886a"><code>c601a78</code></a>
[release] Release new version</li>
<li><a
href="102ee25440"><code>102ee25</code></a>
Avoid test execution on Java 7.</li>
<li><a
href="3b5f4dcb8a"><code>3b5f4dc</code></a>
Remove unused packages.</li>
<li><a
href="b42f78b2a5"><code>b42f78b</code></a>
Add scheme part to URI.</li>
<li><a
href="d94d66a18c"><code>d94d66a</code></a>
Add scheme part to URI.</li>
<li><a
href="aaa18f29c9"><code>aaa18f2</code></a>
Adjust expectation for dynamic lambda invocation.</li>
<li><a
href="0f3bd5f2e6"><code>0f3bd5f</code></a>
Add hints for spotbugs.</li>
<li><a
href="c2242c7f3c"><code>c2242c7</code></a>
fix javadoc.</li>
<li><a
href="0a2e4ea5d2"><code>0a2e4ea</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1407">#1407</a>
from capthua/master</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.13.0...byte-buddy-1.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `net.bytebuddy:byte-buddy-gradle-plugin` from 1.13.0 to 1.14.0


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: opentelemetrybot <107717825+opentelemetrybot@users.noreply.github.com>
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2023-02-21 12:33:35 +02:00
dependabot[bot] 322b15fea7
Bump gradle/wrapper-validation-action from 1.0.5 to 1.0.6 (#7861)
Bumps
[gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action)
from 1.0.5 to 1.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/wrapper-validation-action/releases">gradle/wrapper-validation-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.6</h2>
<h1>Gradle Wrapper Validation</h1>
<ul>
<li>Security vulnerability: <a
href="959bfac6da">Bump
json5 from 1.0.1 to 1.0.2</a></li>
<li>Security vulnerability: <a
href="ffa46e5c87">Bump
qs from 6.10.1 to 6.11.0</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8d49e559aa"><code>8d49e55</code></a>
Use Node 16 for CI workflow</li>
<li><a
href="553793aaea"><code>553793a</code></a>
Build outputs</li>
<li><a
href="79fc16cf9b"><code>79fc16c</code></a>
Add name to package_lock</li>
<li><a
href="bc61a16645"><code>bc61a16</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/68">#68</a>
from TWiStErRob/patch-2</li>
<li><a
href="64a4451e28"><code>64a4451</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/71">#71</a>
from gradle/dependabot/npm_and_yarn/json5-1.0.2</li>
<li><a
href="664dcf59c9"><code>664dcf5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/70">#70</a>
from gradle/dependabot/npm_and_yarn/qs-6.11.0</li>
<li><a
href="dabb1b52d3"><code>dabb1b5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/73">#73</a>
from obfusk/patch-2</li>
<li><a
href="777fab02ef"><code>777fab0</code></a>
fix typo: diffoscope not DiffScope</li>
<li><a
href="6c56157398"><code>6c56157</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/72">#72</a>
from gradle/no/checkout-3</li>
<li><a
href="a63eded8e0"><code>a63eded</code></a>
Update workflows to v3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/wrapper-validation-action/compare/v1.0.5...v1.0.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gradle/wrapper-validation-action&package-manager=github_actions&previous-version=1.0.5&new-version=1.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 09:51:56 +02:00
dependabot[bot] 22d21553e0
Bump net.bytebuddy:byte-buddy-dep from 1.13.0 to 1.14.0 in /examples/distro (#7864)
Bumps
[net.bytebuddy:byte-buddy-dep](https://github.com/raphw/byte-buddy) from
1.13.0 to 1.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">net.bytebuddy:byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.14.0</h2>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">net.bytebuddy:byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h3>18. February 2023: version 1.14.0</h3>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in
<code>MemberSubstitution</code> that allows for delegation similar to
<code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and
<code>Advice</code> that leverage method handles for field access and
self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows
casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated,
and use newer method if available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="00da41ec54"><code>00da41e</code></a>
[maven-release-plugin] prepare release byte-buddy-1.14.0</li>
<li><a
href="c601a7886a"><code>c601a78</code></a>
[release] Release new version</li>
<li><a
href="102ee25440"><code>102ee25</code></a>
Avoid test execution on Java 7.</li>
<li><a
href="3b5f4dcb8a"><code>3b5f4dc</code></a>
Remove unused packages.</li>
<li><a
href="b42f78b2a5"><code>b42f78b</code></a>
Add scheme part to URI.</li>
<li><a
href="d94d66a18c"><code>d94d66a</code></a>
Add scheme part to URI.</li>
<li><a
href="aaa18f29c9"><code>aaa18f2</code></a>
Adjust expectation for dynamic lambda invocation.</li>
<li><a
href="0f3bd5f2e6"><code>0f3bd5f</code></a>
Add hints for spotbugs.</li>
<li><a
href="c2242c7f3c"><code>c2242c7</code></a>
fix javadoc.</li>
<li><a
href="0a2e4ea5d2"><code>0a2e4ea</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1407">#1407</a>
from capthua/master</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.13.0...byte-buddy-1.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.13.0&new-version=1.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 09:51:27 +02:00
dependabot[bot] 4607fcf03c
Bump com.github.ben-manes.versions from 0.45.0 to 0.46.0 (#7863)
Bumps com.github.ben-manes.versions from 0.45.0 to 0.46.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.ben-manes.versions&package-manager=gradle&previous-version=0.45.0&new-version=0.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 09:46:12 +02:00
Lauri Tulmin 0351cfbdb5
Fix vaadin 14 test failures (#7856)
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7859
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7855
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7854
Apparently default node version was change to 18 for github actions. I
wasn't able to reproduce the failure, nor find anything in the test
output that would help to pinpoint the exact cause of the failure.
Changing the node version to 16 seems to get vaadin 14 tests passing
again.
2023-02-20 11:58:59 +01:00
Lauri Tulmin b139e1d429
Look up helper class bytes when they are needed (#7839)
We can save a bit of heap space by not keeping the class bytes in
memory, we can easily look them up when needed.
2023-02-17 14:00:40 +02:00
dependabot[bot] 36c21d7d76
Bump com.google.protobuf:protobuf-java-util from 3.21.12 to 3.22.0 (#7842) 2023-02-16 15:59:14 -08:00
dependabot[bot] 4ac4877959
Bump io.quarkus from 2.16.2.Final to 2.16.3.Final (#7843) 2023-02-16 15:58:54 -08:00
dependabot[bot] 8a325f7a55
Bump io.quarkus.platform:quarkus-bom from 2.16.2.Final to 2.16.3.Final (#7844) 2023-02-16 15:58:38 -08:00
dependabot[bot] 8dc7430ae8
Bump com.google.protobuf:protobuf-java-util from 3.21.12 to 3.22.0 in /examples/extension (#7845) 2023-02-16 15:58:21 -08:00
dependabot[bot] 7487d2887f
Bump com.google.protobuf:protobuf-java-util from 3.21.12 to 3.22.0 in /examples/distro (#7846) 2023-02-16 15:57:58 -08:00
Mateusz Rzeszutek 12ea869855
Implement `messaging.kafka.*` attributes spec (part 1) (#7824)
Part 1 of #7771

It's a lot more than I initially expected it to be; I'll introduce the
clientId attribute in part 2
2023-02-16 13:22:17 -08:00
Mateusz Rzeszutek 0e4e696ed4
Remove docs/semantic-conventions.md (#7836)
Resolves #7809
2023-02-16 13:17:08 -08:00
Mateusz Rzeszutek d9b0eee503
Remove deprecated instrumentation-api-semconv code (#7838) 2023-02-16 13:16:52 -08:00
dependabot[bot] 73353471d1
Bump dockerJavaVersion from 3.2.14 to 3.3.0 (#7826)
Bumps `dockerJavaVersion` from 3.2.14 to 3.3.0.
Updates `com.github.docker-java:docker-java-core` from 3.2.14 to 3.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker-java/docker-java/releases">com.github.docker-java:docker-java-core's
releases</a>.</em></p>
<blockquote>
<h2>3.3.0</h2>
<h2>Changes</h2>
<ul>
<li>Bump junixsocket.version from 2.3.2 to 2.6.1 <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1988">#1988</a>)</li>
</ul>
<h2>📈 Enhancements</h2>
<ul>
<li>Support docker context <a
href="https://github.com/skagedal"><code>@​skagedal</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2036">#2036</a>)</li>
<li>Add <code>Name</code> to <code>ContainerNetworkConfig</code> <a
href="https://github.com/albers"><code>@​albers</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2052">#2052</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Rename default branch to main <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2070">#2070</a>)</li>
<li>Deprecate <code>JerseyDockerHttpClient</code> <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2067">#2067</a>)</li>
<li>Fix parameter order in <code>assertEquals</code> <a
href="https://github.com/albers"><code>@​albers</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2066">#2066</a>)</li>
<li>Fix typo of certificate <a
href="https://github.com/belugabehr"><code>@​belugabehr</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2053">#2053</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f306650d6d"><code>f306650</code></a>
Rename default branch to main (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2070">#2070</a>)</li>
<li><a
href="59b2b8c073"><code>59b2b8c</code></a>
Deprecate <code>JerseyDockerHttpClient</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2067">#2067</a>)</li>
<li><a
href="26cd13ced7"><code>26cd13c</code></a>
Fix parameter order in <code>assertEquals</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2066">#2066</a>)</li>
<li><a
href="f8fd4924db"><code>f8fd492</code></a>
Support docker context (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2036">#2036</a>)</li>
<li><a
href="db508d877a"><code>db508d8</code></a>
Add <code>Name</code> to <code>ContainerNetworkConfig</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2052">#2052</a>)</li>
<li><a
href="0867f5b433"><code>0867f5b</code></a>
Fix typo of certificate (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2053">#2053</a>)</li>
<li><a
href="079797ffb2"><code>079797f</code></a>
Bump junixsocket.version from 2.3.2 to 2.6.1 (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1988">#1988</a>)</li>
<li>See full diff in <a
href="https://github.com/docker-java/docker-java/compare/3.2.14...3.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.github.docker-java:docker-java-transport-httpclient5` from
3.2.14 to 3.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker-java/docker-java/releases">com.github.docker-java:docker-java-transport-httpclient5's
releases</a>.</em></p>
<blockquote>
<h2>3.3.0</h2>
<h2>Changes</h2>
<ul>
<li>Bump junixsocket.version from 2.3.2 to 2.6.1 <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1988">#1988</a>)</li>
</ul>
<h2>📈 Enhancements</h2>
<ul>
<li>Support docker context <a
href="https://github.com/skagedal"><code>@​skagedal</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2036">#2036</a>)</li>
<li>Add <code>Name</code> to <code>ContainerNetworkConfig</code> <a
href="https://github.com/albers"><code>@​albers</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2052">#2052</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Rename default branch to main <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2070">#2070</a>)</li>
<li>Deprecate <code>JerseyDockerHttpClient</code> <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2067">#2067</a>)</li>
<li>Fix parameter order in <code>assertEquals</code> <a
href="https://github.com/albers"><code>@​albers</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2066">#2066</a>)</li>
<li>Fix typo of certificate <a
href="https://github.com/belugabehr"><code>@​belugabehr</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2053">#2053</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f306650d6d"><code>f306650</code></a>
Rename default branch to main (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2070">#2070</a>)</li>
<li><a
href="59b2b8c073"><code>59b2b8c</code></a>
Deprecate <code>JerseyDockerHttpClient</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2067">#2067</a>)</li>
<li><a
href="26cd13ced7"><code>26cd13c</code></a>
Fix parameter order in <code>assertEquals</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2066">#2066</a>)</li>
<li><a
href="f8fd4924db"><code>f8fd492</code></a>
Support docker context (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2036">#2036</a>)</li>
<li><a
href="db508d877a"><code>db508d8</code></a>
Add <code>Name</code> to <code>ContainerNetworkConfig</code> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2052">#2052</a>)</li>
<li><a
href="0867f5b433"><code>0867f5b</code></a>
Fix typo of certificate (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/2053">#2053</a>)</li>
<li><a
href="079797ffb2"><code>079797f</code></a>
Bump junixsocket.version from 2.3.2 to 2.6.1 (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1988">#1988</a>)</li>
<li>See full diff in <a
href="https://github.com/docker-java/docker-java/compare/3.2.14...3.3.0">compare
view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-16 11:42:02 +01:00
OpenTelemetry Bot 2b6e89b6eb
Merge change log updates from release/v1.23.x (#7831)
Merge log updates from `release/v1.23.x`.
2023-02-15 17:45:31 -08:00
OpenTelemetry Bot a547abd2a8
Update version to 1.24.0-SNAPSHOT (#7828)
Update version to `1.24.0-SNAPSHOT`.
2023-02-15 23:29:27 +00:00
Trask Stalnaker c0d6a2ac60
Update change log for 1.23.0 (#7823)
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2023-02-15 14:06:17 -08:00
OpenTelemetry Bot dac0abdf0d
Update the OpenTelemetry SDK version to 1.23.1 (#7825)
Update the OpenTelemetry SDK version to `1.23.1`.
2023-02-15 14:04:25 -08:00
Trask Stalnaker 8f32133430
Rename module from jsf-common to jsf-javax-common (#7812) 2023-02-15 08:39:08 +01:00
Trask Stalnaker 391e881bf4
Remove unused file (#7814) 2023-02-15 08:17:53 +01:00
dependabot[bot] 56e76e283f
Bump org.owasp:dependency-check-gradle from 8.0.2 to 8.1.0 (#7815) 2023-02-14 23:58:16 +00:00
dependabot[bot] 6bf19b98d0
Bump com.linecorp.armeria:armeria-junit5 from 1.22.0 to 1.22.1 (#7818) 2023-02-14 23:31:11 +00:00
Mateusz Rzeszutek 4fd52c5a7c
Encode version in library instrumentations' package names (#7764)
Another part of #932

In this PR I changed all the library instrumentation packages -- these
are breaking changes, so I figured the earlier we do this the less
painful it'll be to the users. I know that at least some of them are
actively used, so we'll need to spell this out in the release notes.

---------

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2023-02-14 23:25:59 +00:00
dependabot[bot] b04bf88245
Bump com.linecorp.armeria:armeria-grpc from 1.22.0 to 1.22.1 (#7816) 2023-02-14 23:11:44 +00:00
dependabot[bot] c797892492
Bump commons-fileupload:commons-fileupload from 1.4 to 1.5 (#7817) 2023-02-14 23:06:56 +00:00
Trask Stalnaker 62267fd4dd
Fix play smoke test (#7819)
resolves #7813

caused by conflict between #7730 and #7801
2023-02-14 22:36:27 +00:00
Lauri Tulmin 4023a59068
Grpc client instrumentation net.sock.peer.addr (#7742)
Currently grpc client instrumentation unreliably fills
`net.sock.peer.addr` which makes tests flaky
https://ge.opentelemetry.io/s/nni57d5zryafk/tests/:instrumentation:grpc-1.6:javaagent:test/io.opentelemetry.javaagent.instrumentation.grpc.v1_6.GrpcStreamingTest/conversation(int,%20int)%5B8%5D?expanded-stacktrace=WyIwIl0&top-execution=1
This pr moves capturing `net.sock.peer.addr` to a later point where it
seems to work reliably.
2023-02-14 12:04:53 -08:00
Oleh Astappiev ae6350bbd3
Add Jakarta JSF 3.0+ instrumentation (#7786)
Hi,

I copied existing JSF 1.2-2 instrumentation, updated dependencies and
namespaces related to JSF 3+.
I don't work with Mojjara implementation, but copied by analogy and
verified that package names are unchanged.

I named new packages by anology with `servlet` packages, but I use
`jsf-jakarta-common` when in servlet we have `servlet-javax-common`.
My idea was to avoid touching existing packages, but perhaps to keep
consistency, I can rename old `jsf-common` to `jsf-javax-common`.

Tested with Tomcat and my app, it's working fine with JSF 4 :)
2023-02-14 12:01:41 -08:00
Mateusz Rzeszutek ea237e3a80
Update HTTP span name extractors (#7730)
Implements
https://github.com/open-telemetry/opentelemetry-specification/issues/2998

---------

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2023-02-14 07:40:05 -08:00
Lauri Tulmin cde6c98666
Tests need to reset GlobalEventEmitterProvider (#7810)
After sdk update we have new flaky tests

https://ge.opentelemetry.io/s/qozoj3c4zxmge/tests/:javaagent-tooling:test/io.opentelemetry.javaagent.test.HelperInjectionTest/helpers%20injected%20on%20bootstrap%20classloader?top-execution=1

https://ge.opentelemetry.io/s/qozoj3c4zxmge/tests/:javaagent-tooling:test/io.opentelemetry.javaagent.tooling.OpenTelemetryInstallerTest/should%20initialize%20GlobalOpenTelemetry?top-execution=1
2023-02-14 16:43:55 +02:00
moznion 7e8d76a83b
Put `http.route` attribute onto `http.server.duration` on Play framework request processing (#7801)
Basically, `akka-http` instrumenter has the responsibility to instrument
the `http.server.duration` for the Play framework application, but the
current implementation has not marked the `http.route` attribute.
ref:
8e8161cb2e/instrumentation/akka/akka-http-10.0/javaagent/src/main/java/io/opentelemetry/javaagent/instrumentation/akkahttp/server/AkkaHttpServerAttributesGetter.java (L59)

Actually, it's hard to record that attribute by only the akka-http layer
because that library's request object doesn't hold the route
information, e.g. placeholder.

So this patch delegates that job to the `play-mvc` instrumenter and when
that has been able to get the route info, the instrumenter puts
`http.route` attribute onto `http.server.duration`.

For example, when the routes configuration of the Play is like the
following:

```
GET  /foo/:bar  controllers.HomeController.doSomething(bar: String)
```

and when it tries to access that API, then OTEL instruments like so:

```prometheus
http_server_duration_count{otel_scope_name="io.opentelemetry.akka-http-10.0",otel_scope_version="1.23.0-alpha-SNAPSHOT",http_flavor="1.1",http_method="GET",http_route="/foo/$bar<[^/]+>",http_scheme="http",http_status_code="200",net_host_name="localhost",net_host_port="9000"} 1.0 1676078079798
http_server_duration_sum{otel_scope_name="io.opentelemetry.akka-http-10.0",otel_scope_version="1.23.0-alpha-SNAPSHOT",http_flavor="1.1",http_method="GET",http_route="/foo/$bar<[^/]+>",http_scheme="http",http_status_code="200",net_host_name="localhost",net_host_port="9000"} 12183.558843 1676078079798
http_server_duration_bucket{otel_scope_name="io.opentelemetry.akka-http-10.0",otel_scope_version="1.23.0-alpha-SNAPSHOT",http_flavor="1.1",http_method="GET",http_route="/foo/$bar<[^/]+>",http_scheme="http",http_status_code="200",net_host_name="localhost",net_host_port="9000",le="0.0"} 0.0 1676078079798
...
http_server_duration_bucket{otel_scope_name="io.opentelemetry.akka-http-10.0",otel_scope_version="1.23.0-alpha-SNAPSHOT",http_flavor="1.1",http_method="GET",http_route="/foo/$bar<[^/]+>",http_scheme="http",http_status_code="200",net_host_name="localhost",net_host_port="9000",le="+Inf"} 1.0 1676078079798
```

Rel: #1415

---------

Signed-off-by: moznion <moznion@mail.moznion.net>
2023-02-14 14:05:59 +02:00