chore(deps-dev): bump software.amazon.opentelemetry:aws-opentelemetry-agent from 2.28.1 to 2.28.2 in /samples/spring-ai-agent

[dependabot]

Bumps software.amazon.opentelemetry:aws-opentelemetry-agent from 2.28.1 to 2.28.2.

Release notes

Sourced from software.amazon.opentelemetry:aws-opentelemetry-agent's releases.

Release v2.28.2

What's Changed

• Add Dynamic Instrumentation (Preview): capture additional runtime telemetry from a running application without a restart or redeploy. Opt-in and disabled by default via OTEL_AWS_DYNAMIC_INSTRUMENTATION_ENABLED. See docs/dynamic-instrumentation.md. (#1384)
• Add ServiceEvents instrumentation: emit endpoint summaries, function-call duration metrics, deployment events, and incident snapshots to CloudWatch Application Signals via OTLP. (#1386)
• Bump Netty to 4.1.135.Final to fix CVE-2026-45416 and CVE-2026-44249 (#1389)
• ServiceEvents: parse OTEL_AWS_SERVICE_EVENTS_LATENCY_THRESHOLDS as a comma-separated list to match the Python and JS SDKs (was pipe-separated). Routes containing a literal comma must now be matched with a glob, e.g. GET /search*:750. (#1393)
• fix(lambda-layer): Standardize CompactConsoleLogRecordExporter output with CloudWatch OTLP backend schema. (#1358)

Upstream Components

• OpenTelemetry Java Contrib - 1.57.0
• Opentelemetry Instrumentation for Java - 2.28.1

Release Artifacts

This release publishes to public ECR and Maven Central.

• See ADOT Java auto-instrumentation Docker image v2.28.2 in our public ECR repository: https://gallery.ecr.aws/aws-observability/adot-autoinstrumentation-java
• See version 2.28.2 in our Maven Central repository: https://central.sonatype.com/artifact/software.amazon.opentelemetry/aws-opentelemetry-agent

Lambda Layer

This release includes the AWS OpenTelemetry Lambda Layer for Java version 2.28.2-0938480.

Lambda Layer ARNs:

Region	Layer ARN
af-south-1	arn:aws:lambda:af-south-1:904233096616:layer:AWSOpenTelemetryDistroJava:15
ap-east-1	arn:aws:lambda:ap-east-1:888577020596:layer:AWSOpenTelemetryDistroJava:15
ap-east-2	arn:aws:lambda:ap-east-2:412664885777:layer:AWSOpenTelemetryDistroJava:4
ap-northeast-1	arn:aws:lambda:ap-northeast-1:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-northeast-2	arn:aws:lambda:ap-northeast-2:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-northeast-3	arn:aws:lambda:ap-northeast-3:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-south-1	arn:aws:lambda:ap-south-1:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-south-2	arn:aws:lambda:ap-south-2:796973505492:layer:AWSOpenTelemetryDistroJava:15
ap-southeast-1	arn:aws:lambda:ap-southeast-1:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-southeast-2	arn:aws:lambda:ap-southeast-2:615299751070:layer:AWSOpenTelemetryDistroJava:15
ap-southeast-3	arn:aws:lambda:ap-southeast-3:039612877180:layer:AWSOpenTelemetryDistroJava:15
ap-southeast-4	arn:aws:lambda:ap-southeast-4:713881805771:layer:AWSOpenTelemetryDistroJava:15
ap-southeast-5	arn:aws:lambda:ap-southeast-5:152034782359:layer:AWSOpenTelemetryDistroJava:12
ap-southeast-6	arn:aws:lambda:ap-southeast-6:313828097273:layer:AWSOpenTelemetryDistroJava:4
ap-southeast-7	arn:aws:lambda:ap-southeast-7:980416031188:layer:AWSOpenTelemetryDistroJava:12
ca-central-1	arn:aws:lambda:ca-central-1:615299751070:layer:AWSOpenTelemetryDistroJava:15
ca-west-1	arn:aws:lambda:ca-west-1:595944127152:layer:AWSOpenTelemetryDistroJava:12
cn-north-1	arn:aws-cn:lambda:cn-north-1:440179912924:layer:AWSOpenTelemetryDistroJava:12
cn-northwest-1	arn:aws-cn:lambda:cn-northwest-1:440180067931:layer:AWSOpenTelemetryDistroJava:12
eu-central-1	arn:aws:lambda:eu-central-1:615299751070:layer:AWSOpenTelemetryDistroJava:15
eu-central-2	arn:aws:lambda:eu-central-2:156041407956:layer:AWSOpenTelemetryDistroJava:15
eu-north-1	arn:aws:lambda:eu-north-1:615299751070:layer:AWSOpenTelemetryDistroJava:15

... (truncated)

Changelog

Sourced from software.amazon.opentelemetry:aws-opentelemetry-agent's changelog.

v2.28.2 - 2026-06-18

• Add Dynamic Instrumentation (Preview): capture additional runtime telemetry from a running application without a restart or redeploy. Opt-in and disabled by default via OTEL_AWS_DYNAMIC_INSTRUMENTATION_ENABLED. See docs/dynamic-instrumentation.md. (#1384)
• Add ServiceEvents instrumentation: emit endpoint summaries, function-call duration metrics, deployment events, and incident snapshots to CloudWatch Application Signals via OTLP. (#1386)
• Bump Netty to 4.1.135.Final to fix CVE-2026-45416 and CVE-2026-44249 (#1389)
• ServiceEvents: parse OTEL_AWS_SERVICE_EVENTS_LATENCY_THRESHOLDS as a comma-separated list to match the Python and JS SDKs (was pipe-separated). Routes containing a literal comma must now be matched with a glob, e.g. GET /search*:750. (#1393)
• fix(lambda-layer): Standardize CompactConsoleLogRecordExporter output with CloudWatch OTLP backend schema. (#1358)

Commits

• 0938480 cherry-pick main to release/2.28.x (#1403)
• 98544b3 Add .kotlin/ to .gitignore to fix nebula.release dirty-tree failure (#1405)
• e98f5e7 Pre-release: Update version to 2.28.2 (#1398)
• 16e6339 Backport changes from main for v2.28.2 release (#1397)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)