Bump the alldependencies group across 1 directory with 30 updates

[dependabot]

Bumps the alldependencies group with 30 updates in the / directory:

Package	From	To
org.openapi.generator	7.15.0	7.24.0
org.slf4j:slf4j-api	2.0.17	2.0.18
org.slf4j:jul-to-slf4j	2.0.17	2.0.18
ch.qos.logback:logback-classic	1.5.34	1.6.0
io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0	2.29.0-alpha	2.30.0-alpha
io.opentelemetry:opentelemetry-api	1.63.0	1.64.0
io.opentelemetry:opentelemetry-sdk	1.63.0	1.64.0
io.opentelemetry:opentelemetry-exporter-logging	1.63.0	1.64.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api	2.29.0	2.30.0
com.google.errorprone:error_prone_annotations	2.15.0	2.50.0
io.swagger.core.v3:swagger-core	2.2.23	2.2.52
io.dropwizard.metrics:metrics-core	4.2.12	4.2.39
io.dropwizard.metrics:metrics-servlets	4.2.12	4.2.39
io.prometheus:prometheus-metrics-instrumentation-dropwizard	1.6.1	1.8.0
io.prometheus:prometheus-metrics-exporter-servlet-javax	1.6.1	1.8.0
com.fasterxml.jackson.core:jackson-databind	2.22.0	2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-csv	2.22.0	2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	2.22.0	2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-xml	2.22.0	2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	2.22.0	2.22.1
io.jsonwebtoken:jjwt-api	0.11.5	0.13.0
io.jsonwebtoken:jjwt-jackson	0.11.5	0.13.0
io.jsonwebtoken:jjwt-impl	0.11.5	0.13.0
com.oracle.database.jdbc:ojdbc11	23.26.1.0.0	23.26.2.0.0
org.freemarker:freemarker	2.3.32	2.3.34
com.github.javaparser:javaparser-core	3.26.2	3.28.2
com.github.javaparser:javaparser-symbol-solver-core	3.26.2	3.28.2
org.apache.tomcat.embed:tomcat-embed-core	9.0.118	9.0.120
org.apache.tomcat.embed:tomcat-embed-jasper	9.0.118	9.0.120
org.apache.tomcat:tomcat-jdbc	9.0.118	9.0.120

Updates org.openapi.generator from 7.15.0 to 7.24.0

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates ch.qos.logback:logback-classic from 1.5.34 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

1. • Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the <condition> element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• b07adf3 synronized logback-access with future 2.0.14
• 8381cdc prepare release 1.6.0
• 15db759 notes on removed deprecated classes, methods and variables.
• 90ced5a revert removal of support for packaing data
• 64c5d3f Packaging data is no longer supported. It was rarely used.
• 5474044 fix failing tests
• ac484c2 in version 1.6.x target JDK 11
• 01eaa90 start work on version 1.6.0-SNAPSHOT
• d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
• 94ba1a0 improve message in case of version mismatch
• Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0 from 2.29.0-alpha to 2.30.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0's releases.

Version 2.29.0

This release targets the OpenTelemetry SDK 1.63.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Change the return type for JmxTelemetry.start(...) APIs. (#18782)
• Experimental runtime package telemetry now emits package.checksum_algorithm=SHA-256 and 64-character package.checksum values instead of SHA1 checksums. (#18846)

🚫 Deprecations

• Rename the common logging context keys to otel.instrumentation.common.logging.trace-id-key, otel.instrumentation.common.logging.span-id-key, and otel.instrumentation.common.logging.trace-flags-key, while keeping the old property names deprecated. (#18851)
• Rename the kafka-broker and kafka-connect JMX target systems to experimental-kafka-broker and experimental-kafka-connect; the old names still work for now and log a warning. (#18971)

🌟 New javaagent instrumentation

• Add SOFARPC 5.4 instrumentation that emits RPC client and server spans and metrics. (#15589)
• Add Javaagent instrumentation for HBase client 2.0.0 through 2.5.0. (#18253)

📈 Enhancements

• Add opt-in support for emitting HTTP request exceptions as log signals with otel.semconv.exception.signal.preview=logs. (#16259)
• Add opentelemetry-api-1.63 Javaagent instrumentation for OpenTelemetry API 1.63 and opentelemetry-api-incubator 1.63. (#18911)
• Add otel.semconv-stability.v3-preview as a fallback for the declarative v3_preview semconv stability setting. (#18936)
• Update the experimental stable database semantic-convention opt-in (otel.semconv-stability.opt-in=database) across database instrumentations, including span names and db.* attributes. (#18808, #18853, #18920, #18922, #18926, #18930, #18970, #18979, #18980, #18984, #18985, #18986, #18987, #18989, #18990, #18992, #18993, #19004, #19005)
• Capture query text and parameterization for Cassandra batch statements. (#18964)
• Keep opentelemetry-api and opentelemetry-instrumentation-annotations enabled under otel.instrumentation.common.v3-preview even when default-enabled=false. (#18792)
• When otel.instrumentation.common.v3-preview is enabled, affected instrumentations emit user.* identity attributes instead of enduser.* ones. (#18795)
• Disable Kafka client metrics by default when otel.instrumentation.common.v3-preview=true. (#18828)
• Recognize Amazon Aurora DSQL and AWS wrapper JDBC URL prefixes when parsing JDBC connection metadata. (#18831)
• Set instrumentation versions on emitted Meter scopes. (#18866)
• Run @WithSpan instrumentation after other instrumentations so other advice can attach attributes to the active span. (#18874)
• Emit database client failures as db.client.operation.exception logs when otel.semconv.exception.signal.preview is enabled. (#18889)
• Emit RPC exceptions as log records when otel.semconv.exception.signal.preview=logs is enabled. (#18890)
• Emit messaging exceptions as log records under otel.semconv.exception.signal.preview. (#18891)
• Emit faas.invocation.exception log records for FaaS exceptions when otel.semconv.exception.signal.preview=logs is enabled. (#18892)
• Emit gen_ai.client.operation.exception logs for OpenAI chat and embeddings failures when otel.semconv.exception.signal.preview=logs is enabled. (#18893)
• Emit AWS SDK request failures as rpc.client.call.exception log records when otel.semconv.exception.signal.preview=logs is enabled. (#18894)
• Declarative configuration now supports per-domain semantic-convention selection using semconv.version, semconv.experimental, and semconv.dual_emit settings. (#18908)
• When otel.instrumentation.common.v3-preview is enabled, use otel.semconv-stability.preview instead of otel.semconv-stability.opt-in to opt in to the nonstable service.peer and rpc semantic conventions. (#18914)
• Disable Kotlin coroutines @WithSpan instrumentation by default when otel.instrumentation.common.v3-preview=true. (#18919)
• Use the summary-aware path in SqlQueryAnalyzer.analyze() when otel.instrumentation.common.v3-preview is enabled. (#18921)
• When otel.instrumentation.common.v3-preview is enabled, deprecated JDBC/db sanitization config names are ignored in favor of db.query_sanitization.enabled. (#18934)
• Include jvm.gc.cause on GC duration metrics when otel.instrumentation.common.v3-preview is enabled. (#18967)
• Emit duration metrics for JDBC transaction operations COMMIT and ROLLBACK. (#19003)
• Use a generated InstrumentationVersion class in OkHttp 3.0 instead of reading embedded version properties, avoiding Android StrictMode disk-read violations. (#19006)
• Add thread details span attributes for declarative Spring starter configuration when distribution.spring_starter.thread_details_enabled is set. (#19008)

🛠️ Bug fixes

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0's changelog.

Changelog

Unreleased

Version 2.30.0 (2026-07-22)

This release targets the OpenTelemetry SDK 1.64.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Remove ExperimentalInstrumentationModule#getModuleGroup(). Built-in invokedynamic modules now share a single InstrumentationModuleClassLoader, and each extension is isolated in its own. (#18859)
• Remove the deprecated InstrumentationModule.isIndyModule(); whether a module uses invokedynamic is now determined by the agent rather than declared per module. (#19140)
• Remove deprecated query-related APIs from SqlClientAttributesGetter, CassandraRequest, and Experimental. (#19165)
• Remove the deprecated Enduser* attribute-capturing APIs from the Spring Security 6.0 library; use the User* replacements instead. (#19168)

🚫 Deprecations

• Deprecate only the Spring Boot starter ConfigProperties compatibility bean used with experimental declarative configuration, in favor of the new ConfigProvider bean; it will be removed in 3.0. The ConfigProperties bean remains supported for non-declarative configuration. (#19175)
• Deprecate DeclarativeConfigPropertiesBridge and DeclarativeConfigPropertiesBridgeBuilder. Use DeclarativeConfigProperties directly or DeclarativeConfigBridge instead. Will be removed in 3.0. (#19202)
• Deprecate ConfigPropertiesBackedConfigProvider in favor of DeclarativeConfigBridge. It will be removed in 2.31.0. (#19220)

🌟 New javaagent instrumentation

• Add Javaagent instrumentation for HBase client 1.4. (#19087)

🌟 New library instrumentation

• Add library instrumentation (ThriftTelemetry) for the Apache Thrift 0.13 async server.

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry:opentelemetry-api from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-exporter-logging from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-exporter-logging's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-exporter-logging's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529...

  Description has been truncated