spring-projects / spring-amqp

Spring AMQP - support for Spring programming model with AMQP, especially but not limited to RabbitMQ
https://spring.io/projects/spring-amqp
Apache License 2.0
807 stars 620 forks source link

Bump io.micrometer:micrometer-tracing-bom from 1.2.9 to 1.2.10 #2826

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 2 weeks ago

Bumps io.micrometer:micrometer-tracing-bom from 1.2.9 to 1.2.10.

Release notes

Sourced from io.micrometer:micrometer-tracing-bom's releases.

1.2.10

Because of dependency issues in OTel, you might get conflicting versions of io.opentelemetry:opentelemetry-api that your build tool should be able to deal with and resolve the higher version but here are the details in case you want to double-check it: Micrometer depends on io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha:1.31.0-alpha which brings in io.opentelemetry:opentelemetry-api:1.31.0 (through io.opentelemetry:opentelemetry-bom:1.31.0) and io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha. But io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha brings in io.opentelemetry:opentelemetry-api:1.29.0.

So in OTel's dependency tree both 1.29.0 and 1.31.0 of io.opentelemetry:opentelemetry-api are present, see: #819.

:warning: Noteworthy

  • OTel dependency convergence issue #819

:lady_beetle: Bug Fixes

  • OTel dependency convergence issue #819

:hammer: Dependency Upgrades

  • Bump io.micrometer:micrometer-bom from 1.12.9 to 1.12.10 #836

:memo: Tasks

  • Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 #821
  • Bump spring from 5.3.37 to 5.3.39 #811
  • Use TestObservationRegistry in context propagation tests #810
  • Bump io.spring.javaformat:spring-javaformat-gradle-plugin from 0.0.42 to 0.0.43 #803
  • Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 #802
  • Bump io.spring.javaformat:spring-javaformat-checkstyle from 0.0.42 to 0.0.43 #801

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​chemicL

Commits
  • 956c91e Bump io.micrometer:micrometer-bom from 1.12.9 to 1.12.10 (#836)
  • 247dcfc Upgrade Gradle to 8.10
  • ccb8adf Use TestObservationRegistry in context propagation tests (#810)
  • 92795f2 Use opentelemetry-instrumentation-bom-alpha (#823)
  • ea81336 Bump io.spring.javaformat:spring-javaformat-checkstyle from 0.0.42 to 0.0.43 ...
  • 3d26339 Bump spring from 5.3.37 to 5.3.39 (#811)
  • 998c163 Bump io.spring.javaformat:spring-javaformat-gradle-plugin (#803)
  • 8169f9e Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 (#802)
  • 89601bd Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 (#821)
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)