dependabot[bot] opened a new pull request, #22218: URL: https://github.com/apache/camel/pull/22218
Bumps [io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17](https://github.com/open-telemetry/opentelemetry-java-instrumentation) from 2.26.0-alpha to 2.26.1-alpha. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases";>io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17's releases</a>.</em></p> <blockquote> <h2>Version 2.26.0</h2> <p>This release targets the OpenTelemetry SDK 1.60.1.</p> <p>Note that many artifacts have the <code>-alpha</code> suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the <a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/VERSIONING.md#opentelemetry-java-instrumentation-versioning";>VERSIONING.md</a> for more details.</p> <h3>⚠️ Breaking changes to non-stable APIs</h3> <ul> <li>Remove deprecated AWS Lambda v2.2 wrappers and <code>forceFlush(int, TimeUnit)</code> overload (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16170";>#16170</a>)</li> <li>Remove deprecated HTTP client/server methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16167";>#16167</a>)</li> <li>Remove deprecated database instrumentation methods and classes (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16164";>#16164</a>)</li> <li>Remove deprecated peer-service mapping APIs (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16165";>#16165</a>)</li> <li>Make runtime-telemetry deprecated classes now internal (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16173";>#16173</a>)</li> <li>Remove <code>AttributesExtractorUtil</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16152";>#16152</a>)</li> <li>Remove marker interface from <code>SqlClientAttributesGetter</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16205";>#16205</a>)</li> <li>Merge network/server getter methods into DB attribute getters (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16264";>#16264</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16268";>#16268</a>)</li> <li>Rename SQL sanitizer classes to SQL analyzer (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16269";>#16269</a>)</li> <li>Rename internal common module packages to follow new naming convention (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16284";>#16284</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16308";>#16308</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16327";>#16327</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16341";>#16341</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16373";>#16373</a>)</li> </ul> <h3>🚫 Deprecations</h3> <ul> <li>Deprecated individual runtime-telemetry module classes in favor of unified module (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16087";>#16087</a>)</li> <li>Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16097";>#16097</a>)</li> <li>Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16130";>#16130</a>)</li> <li>Deprecated old ClickHouse instrumentation methods as part of simplification (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16206";>#16206</a>)</li> <li>Deprecated old R2DBC methods in favor of ones supporting <code>db.system.name</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16251";>#16251</a>)</li> <li>Deprecated old <code>DbClientAttributesGetter</code> methods; added <code>getErrorType()</code> with implementations (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16276";>#16276</a>)</li> <li>Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16298";>#16298</a>)</li> <li>Deprecated old <code>DbClientAttributesGetter</code> methods; added <code>getDbName()</code> to better support old/stable semconv split (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16318";>#16318</a>)</li> </ul> <h3>📈 Enhancements</h3> <ul> <li>Add server address and port attributes for Spymemcached (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/15242";>#15242</a>)</li> <li>Add Kafka Connect as a built-in JMX metrics target (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/15561";>#15561</a>)</li> <li>Convert Lettuce instrumentation to use <code>Instrumenter</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/15838";>#15838</a>)</li> <li>OpenSearch Java client: capture sanitized search query bodies (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/15634";>#15634</a>)</li> <li>Apply stable semantic conventions to Camel JMX metrics (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16088";>#16088</a>)</li> <li>Add <code>jvm.file_descriptor.limit</code> metric (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16174";>#16174</a>)</li> <li>Run gRPC client callbacks with parent context (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16175";>#16175</a>)</li> <li>SQL summary: handle <code>EXPLAIN</code> statements (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16184";>#16184</a>)</li> <li>Simplify InfluxDB instrumentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16207";>#16207</a>)</li> <li>Update histogram buckets for <code>db.client.operation.duration</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16222";>#16222</a>)</li> <li>SQL summary: support Oracle dblink syntax (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16230";>#16230</a>)</li> <li>Add instrumentation for ZIO HTTP server route (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16232";>#16232</a>)</li> <li>Remove network attributes under database stable semconv flag (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16257";>#16257</a>)</li> <li>Support Javalin 7 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16261";>#16261</a>)</li> <li>gRPC: initial stable semconv support (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16304";>#16304</a>)</li> <li>Populate <code>os.version</code> resource attribute (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16311";>#16311</a>)</li> <li>Camel: don't emit db spans under stable semconv (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16275";>#16275</a>)</li> <li>Dubbo: stable semconv support (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16352";>#16352</a>)</li> <li>Update the OpenTelemetry SDK version to 1.60.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16407";>#16407</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md";>io.opentelemetry.instrumentation:opentelemetry-log4j-appender-2.17's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>Unreleased</h2> <h2>Version 2.26.1 (2026-03-23)</h2> <h3>🔒 Security fixes</h3> <ul> <li>Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution (<a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-xw7x-h9fj-p2c7";>CVE-2026-33701</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16979";>#16979</a>)</li> </ul> <h2>Version 2.26.0 (2026-03-14)</h2> <h3>⚠️ Breaking changes to non-stable APIs</h3> <ul> <li>Remove deprecated AWS Lambda v2.2 wrappers and <code>forceFlush(int, TimeUnit)</code> overload (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16170";>#16170</a>)</li> <li>Remove deprecated HTTP client/server methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16167";>#16167</a>)</li> <li>Remove deprecated database instrumentation methods and classes (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16164";>#16164</a>)</li> <li>Remove deprecated peer-service mapping APIs (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16165";>#16165</a>)</li> <li>Make runtime-telemetry deprecated classes now internal (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16173";>#16173</a>)</li> <li>Remove <code>AttributesExtractorUtil</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16152";>#16152</a>)</li> <li>Remove marker interface from <code>SqlClientAttributesGetter</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16205";>#16205</a>)</li> <li>Merge network/server getter methods into DB attribute getters (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16264";>#16264</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16268";>#16268</a>)</li> <li>Rename SQL sanitizer classes to SQL analyzer (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16269";>#16269</a>)</li> <li>Rename internal common module packages to follow new naming convention (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16284";>#16284</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16308";>#16308</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16327";>#16327</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16341";>#16341</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16373";>#16373</a>)</li> </ul> <h3>🚫 Deprecations</h3> <ul> <li>Deprecated individual runtime-telemetry module classes in favor of unified module (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16087";>#16087</a>)</li> <li>Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (<a href="https://redirect.github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16097";>#16097</a>)</li> <li>Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
