Commit c2f1aa4
authored
chore(deps): update upper bound dependencies file (#13303)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[com.fasterxml.jackson:jackson-bom](https://redirect.github.com/FasterXML/jackson-bom)
| `2.21.3` → `2.21.4` |
|
|
|
[com.google.auth:google-auth-library-bom](https://redirect.github.com/googleapis/java-shared-config)
| `1.46.0` → `1.47.0` |
|
|
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://redirect.github.com/protocolbuffers/protobuf)) |
`4.34.1` → `4.35.0` |
|
|
| [dev.cel:cel](https://redirect.github.com/google/cel-java) | `0.12.0`
→ `0.13.0` |
|
|
|
[io.opentelemetry.semconv:opentelemetry-semconv](https://redirect.github.com/open-telemetry/semantic-conventions-java)
| `1.41.0` → `1.41.1` |
|
|
|
[io.opentelemetry:opentelemetry-bom](https://redirect.github.com/open-telemetry/opentelemetry-java)
| `1.61.0` → `1.62.0` |
|
|
| [org.slf4j:slf4j-api](http://www.slf4j.org)
([source](https://redirect.github.com/qos-ch/slf4j),
[changelog](https://www.slf4j.org/news.html)) | `2.0.17` → `2.0.18` |
|
|
| [org.threeten:threetenbp](https://www.threeten.org/threetenbp)
([source](https://redirect.github.com/ThreeTen/threetenbp)) | `1.7.2` →
`1.7.3` |
|
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/7649) for more information.
---
### Release Notes
<details>
<summary>google/cel-java (dev.cel:cel)</summary>
###
[`v0.13.0`](https://redirect.github.com/google/cel-java/releases/tag/v0.13.0)
[Compare
Source](https://redirect.github.com/google/cel-java/compare/v0.12.0...v0.13.0)
This release brings significant performance optimizations, robust
support for parsed-only evaluation across standard extensions, and
several important bug fixes to align behavior with other CEL
implementations. It also introduces major enhancements to the planner
and policy compilation.
#### 🚀 Highlights & New Features
- **Planner Promotion & Enhancements:** The planner runtime builder has
been officially promoted from experimental to the main factories
([#​1033](https://redirect.github.com/google/cel-java/pull/1033)).
**Note: This planner runtime will become the default in a future
release.** Additionally, the planner now supports trace
([#​1031](https://redirect.github.com/google/cel-java/pull/1031)),
exhaustive evaluation
([#​1032](https://redirect.github.com/google/cel-java/pull/1032)),
and partial evaluation via unknowns
([#​982](https://redirect.github.com/google/cel-java/pull/982)).
- **Native Extensions:** We are thrilled to introduce Native Extensions
([#​1037](https://redirect.github.com/google/cel-java/pull/1037)),
a powerful new feature that allows you to seamlessly bind and evaluate
native Java objects and functions directly within your CEL environment.
This drastically reduces boilerplate and avoids the overhead of
converting your Java types into intermediate representations. Please
refer to the [documentation
here](https://redirect.github.com/google/cel-java/blob/main/extensions/src/main/java/dev/cel/extensions/README.md#native-types).
- **Parsed-Only Evaluation Support:** Broadened parsed-only evaluation
support and test coverage across all standard extensions, including
Proto
([#​1015](https://redirect.github.com/google/cel-java/pull/1015)),
Comprehensions
([#​1018](https://redirect.github.com/google/cel-java/pull/1018)),
Lists
([#​1016](https://redirect.github.com/google/cel-java/pull/1016)),
Math
([#​1011](https://redirect.github.com/google/cel-java/pull/1011)),
Sets
([#​1021](https://redirect.github.com/google/cel-java/pull/1021)),
Encoders
([#​1020](https://redirect.github.com/google/cel-java/pull/1020)),
Bindings
([#​1014](https://redirect.github.com/google/cel-java/pull/1014)),
and Strings
([#​1019](https://redirect.github.com/google/cel-java/pull/1019)).
- **New String Extensions:** Added `quote` and `reverse` to the string
extensions library
([#​998](https://redirect.github.com/google/cel-java/pull/998)).
`string.split` was also changed to return an immutable list
([#​1019](https://redirect.github.com/google/cel-java/pull/1019)).
- **Policy Improvements:** Introduced the CEL Policy Conformance Test
Runner for Java and enabled it in OSS
([#​1043](https://redirect.github.com/google/cel-java/pull/1043),
[#​1053](https://redirect.github.com/google/cel-java/pull/1053)),
added support for context variables in the YAML environment
([#​1046](https://redirect.github.com/google/cel-java/pull/1046)),
and allowed specifying a set of optimizers to run during policy
compilation
([#​986](https://redirect.github.com/google/cel-java/pull/986)).
#### ⚡ Performance Improvements
We have invested heavily in optimizing the performance characteristics
of the **planner runtime** compared to the legacy runtime
([#​999](https://redirect.github.com/google/cel-java/pull/999),
[#​1000](https://redirect.github.com/google/cel-java/pull/1000),
[#​1001](https://redirect.github.com/google/cel-java/pull/1001),
[#​1002](https://redirect.github.com/google/cel-java/pull/1002),
[#​1003](https://redirect.github.com/google/cel-java/pull/1003),
[#​1041](https://redirect.github.com/google/cel-java/pull/1041)).
Benchmark highlights include:
- **Massive CPU Speedups:** Drastic execution time cuts, especially for
expressions involving comprehensions (up to an **88% reduction**). When
caching programs, non-protobuf operations see up to a **92%
improvement** (e.g., execution dropping from 77µs down to 10µs).
- **Significant GC Pressure Reduction:** Elimination of unnecessary
temporary object allocations results in up to a **99% memory footprint
reduction** for loops and list creation (e.g., dropping from 160 KB down
to just 1 KB for cached, type-checked programs).
- **Evaluation Nuance:** For non-protobuf work evaluated on-the-fly,
execution is 40%–80% faster with a 60%–97% memory savings. For deep
protobuf field selections, the planner introduces a negligible,
fractional microsecond overhead due to the new planning lifecycle.
#### 🛠️ Configuration & Default Changes
- **Quoted Identifiers:** Quoted identifiers are now **enabled by
default**
([#​997](https://redirect.github.com/google/cel-java/pull/997)).
- **Timestamp Epoch:** `enableTimestampEpoch` is now set by default
([#​989](https://redirect.github.com/google/cel-java/pull/989)),
and the configuration option has been deprecated
([#​991](https://redirect.github.com/google/cel-java/pull/991)).
#### 🐛 Bug Fixes & Correctness
- **Math Consistency:** Fixed `math.round` to use `HALF_UP` to match
documentation and align behavior with `cel-go` and `cel-cpp`
([#​1054](https://redirect.github.com/google/cel-java/pull/1054)).
Removed signed long support for `uint`
([#​1011](https://redirect.github.com/google/cel-java/pull/1011)).
- **CEL Null Handling:** Fixed null assignability for repeated and map
fields
([#​981](https://redirect.github.com/google/cel-java/pull/981))
- **Evaluation Fixes:**
- Fixed partial evaluation to properly check for comprehension bound
variables in the planner
([#​1004](https://redirect.github.com/google/cel-java/pull/1004)).
- Fixed constant folding to prevent errors when sub-ASTs contain unbound
variables
([#​1005](https://redirect.github.com/google/cel-java/pull/1005)).
- Fixed JSON field name resolution for shadowed cases
([#​995](https://redirect.github.com/google/cel-java/pull/995)).
- Fixed `accu_init` to be lazily initialized in the folder
([#​1014](https://redirect.github.com/google/cel-java/pull/1014)).
- Fixed a nested rule issue in policies
([#​1039](https://redirect.github.com/google/cel-java/pull/1039)).
- **Error Reporting:** Function failures (dispatch/overload match) now
always include the function name
([#​1024](https://redirect.github.com/google/cel-java/pull/1024)).
Tracked incompatible output types to provide more accurate error
reporting
([#​1050](https://redirect.github.com/google/cel-java/pull/1050)).
- **YAML/Serialization:** Various fixes applied to `CelEnvironment`,
YAML parsing, and serialization
([#​987](https://redirect.github.com/google/cel-java/pull/987)),
including using structured types in YAML exports
([#​983](https://redirect.github.com/google/cel-java/pull/983)).
#### 👏 New Contributors
A warm welcome and thank you to our new contributors for this release!
- [@​pkwarren](https://redirect.github.com/pkwarren) made their
first contribution adding string extensions (`quote`, `reverse`) in
[#​998](https://redirect.github.com/google/cel-java/pull/998)
- [@​rayokota](https://redirect.github.com/rayokota) made their
first contribution fixing `math.round` rounding behavior in
[#​1054](https://redirect.github.com/google/cel-java/pull/1054)
**Full Changelog**:
<google/cel-java@v0.12.0...v0.13.0>
</details>
<details>
<summary>open-telemetry/semantic-conventions-java
(io.opentelemetry.semconv:opentelemetry-semconv)</summary>
###
[`v1.41.1`](https://redirect.github.com/open-telemetry/semantic-conventions-java/blob/HEAD/CHANGELOG.md#Version-1411-2026-05-12)
[Compare
Source](https://redirect.github.com/open-telemetry/semantic-conventions-java/compare/v1.41.0...v1.41.1)
- Bump to semconv v1.41.1
([#​475](https://redirect.github.com/open-telemetry/semantic-conventions-java/pull/475))
</details>
<details>
<summary>open-telemetry/opentelemetry-java
(io.opentelemetry:opentelemetry-bom)</summary>
###
[`v1.62.0`](https://redirect.github.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1620-2026-05-08)
[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-java/compare/v1.61.0...v1.62.0)
##### API
##### Context
- Fix
[GHSA-rcgg-9c38-7xpx](https://redirect.github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx):
Apply limits to baggage entries for `W3CBaggagePropagator`,
`OtTracePropagator`, `JaegerPropagator`
([#​8378](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8378))
##### SDK
##### Traces
- Avoid `parentContext` allocation on span start for the common case
([#​8332](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8332))
##### Metrics
- Add `setMaxExportBatchSize` to `PeriodicMetricReaderBuilder`
([#​8296](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8296))
- Fix `PeriodicMetricReader` shutdown race that could drop the final
flush
([#​8299](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8299))
##### Exporters
- **BREAKING** Prometheus: Change default server host from `0.0.0.0` to
`localhost`
([#​8298](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8298))
- **BREAKING** Prometheus: Stop converting unit `"1"` to `"ratio"`
([#​8252](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8252))
- OTLP: Fix null input handling in `StringEncoder`
([#​8312](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8312))
- OTLP: Align proto field types and wire tag names in marshalers
([#​8293](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8293))
- OTLP: Fix `MarshalerUtil` `sizeRepeatedString` calculation
([#​8284](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8284))
- OTLP: Bound `JdkHttpSender` thread pool size to prevent unbounded
thread creation
([#​8276](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8276))
- OTLP Profiles: Split profiles data model into separate `sdk-profiles`
and JFR shim modules
([#​8207](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8207))
- OTLP Profiles: Publish alpha release of `opentelemetry-sdk-profiles`
and
`opentelemetry-exporter-otlp-profiles`
([#​8351](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8351))
##### Extensions
- **BREAKING** Declarative config: Extract to new
`opentelemetry-sdk-extension-declarative-config`
artifact with new package
`io.opentelemetry.sdk.autoconfigure.declarativeconfig`
([#​8265](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8265))
- Autoconfigure: Add file size validation in `OtlpConfigUtil` to avoid
unsafe cast to `int`
([#​8287](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8287))
- Declarative config: Fix collection fields to not be initialized to
empty by default
([#​8356](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8356))
- Incubator: Add `EventToSpanEventBridge` to bridge log-based events to
span events
([#​8372](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8372))
##### Testing
- Add `@Nullable` to `equalTo` value argument in
`OpenTelemetryAssertions`
([#​8301](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8301))
- Add `hasValueSatisfying` to `LongPointAssert` and `DoublePointAssert`
for fuzzy value matching
([#​8328](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8328))
- Add `containsPointsSatisfying` to metric data asserts for "each given
assertion must be
satisfied by at least one point, extras allowed" checks on sum, gauge,
histogram, exponential
histogram, and summary data
([#​8329](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8329))
##### Project tooling
- Add initial OSGi support
([#​7964](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/7964))
- Promote `ApiUsageLogger` to `opentelemetry-common` public API
([#​8318](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8318))
- Establish exception logging guidelines and fix inconsistent patterns
across exporters and SDK
([#​8231](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8231))
- Add `*.impl.*` package naming convention for internal code with
japicmp compatibility
([#​8325](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8325))
- Add Sonatype dependency audit to build
([#​8365](https://redirect.github.com/open-telemetry/opentelemetry-java/pull/8365))
</details>
<details>
<summary>ThreeTen/threetenbp (org.threeten:threetenbp)</summary>
###
[`v1.7.3`](https://redirect.github.com/ThreeTen/threetenbp/releases/tag/v1.7.3)
[Compare
Source](https://redirect.github.com/ThreeTen/threetenbp/compare/v1.7.2...v1.7.3)
See the [change
notes](https://www.threeten.org/threetenbp/changes-report.html) for more
information.
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/googleapis/google-cloud-java).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->1 parent 9c90001 commit c2f1aa4
1 file changed
Lines changed: 8 additions & 8 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
10 | 10 | | |
11 | 11 | | |
12 | 12 | | |
13 | | - | |
| 13 | + | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
| 17 | + | |
| 18 | + | |
19 | 19 | | |
20 | 20 | | |
21 | | - | |
22 | | - | |
| 21 | + | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | | - | |
| 35 | + | |
36 | 36 | | |
37 | 37 | | |
38 | 38 | | |
| |||
44 | 44 | | |
45 | 45 | | |
46 | 46 | | |
47 | | - | |
| 47 | + | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
| 50 | + | |
51 | 51 | | |
0 commit comments