Bump the alldependencies group across 1 directory with 30 updates

[dependabot]

Bumps the alldependencies group with 30 updates in the / directory:

Package	From	To
org.openapi.generator	7.15.0	7.24.0
org.slf4j:slf4j-api	2.0.17	2.0.18
org.slf4j:jul-to-slf4j	2.0.17	2.0.18
ch.qos.logback:logback-classic	1.5.34	1.6.1
io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0	2.29.0-alpha	2.30.0-alpha
io.opentelemetry:opentelemetry-api	1.63.0	1.64.0
io.opentelemetry:opentelemetry-sdk	1.63.0	1.64.0
io.opentelemetry:opentelemetry-exporter-logging	1.63.0	1.64.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api	2.29.0	2.30.0
com.google.errorprone:error_prone_annotations	2.15.0	2.50.0
io.swagger.core.v3:swagger-core	2.2.23	2.2.52
io.dropwizard.metrics:metrics-core	4.2.12	4.2.39
io.dropwizard.metrics:metrics-servlets	4.2.12	4.2.39
io.prometheus:prometheus-metrics-instrumentation-dropwizard	1.6.1	1.8.0
io.prometheus:prometheus-metrics-exporter-servlet-javax	1.6.1	1.8.0
com.fasterxml.jackson.core:jackson-databind	2.22.0	2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-csv	2.22.0	2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	2.22.0	2.22.1
com.fasterxml.jackson.dataformat:jackson-dataformat-xml	2.22.0	2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	2.22.0	2.22.1
io.jsonwebtoken:jjwt-api	0.11.5	0.13.0
io.jsonwebtoken:jjwt-jackson	0.11.5	0.13.0
io.jsonwebtoken:jjwt-impl	0.11.5	0.13.0
com.oracle.database.jdbc:ojdbc11	23.26.1.0.0	23.26.3.0.0
org.freemarker:freemarker	2.3.32	2.3.34
com.github.javaparser:javaparser-core	3.26.2	3.28.2
com.github.javaparser:javaparser-symbol-solver-core	3.26.2	3.28.2
org.apache.tomcat.embed:tomcat-embed-core	9.0.118	9.0.120
org.apache.tomcat.embed:tomcat-embed-jasper	9.0.118	9.0.120
org.apache.tomcat:tomcat-jdbc	9.0.118	9.0.120

Updates org.openapi.generator from 7.15.0 to 7.24.0

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates ch.qos.logback:logback-classic from 1.5.34 to 1.6.1

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.1

2026-07-28 Release of logback version 1.6.1

• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. .gz, .zip, .xz). Previously it used a nanotime-based .tmp suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)

• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.

• ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in issues/1043 by seonwoo_jung who also provided the relevant PR.

• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in issues/1046 by seonwoo_jung who also provided the relevant PR.

• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR #1041](qos-ch/logback#1041) by seonwoo_jung.

• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

• See https://logback.qos.ch/news.html#1.6.1 for the original text.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

1. • Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the <condition> element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

... (truncated)

Commits

• 57759f4 prepare release 1.6.1
• 175f99f fix imports
• 4b8773e add compressionFailureLeavesOriginalFileIntact test for XZ compression
• cafaf11 do not delete original file if compression fails
• ee50125 let the temporary file before compression be target file without the .gz or ....
• 5626acc minor refactoring
• d97da4f minor refactoring
• 159c045 more defensive coding in SyslogOutputStream and in SyslogAppenderBase
• 9427d6b slight refactoring for clarity
• 79c4179 slight refactoring
• Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0 from 2.29.0-alpha to 2.30.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0's releases.

Version 2.29.0

This release targets the OpenTelemetry SDK 1.63.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Change the return type for JmxTelemetry.start(...) APIs. (#18782)
• Experimental runtime package telemetry now emits package.checksum_algorithm=SHA-256 and 64-character package.checksum values instead of SHA1 checksums. (#18846)

🚫 Deprecations

• Rename the common logging context keys to otel.instrumentation.common.logging.trace-id-key, otel.instrumentation.common.logging.span-id-key, and otel.instrumentation.common.logging.trace-flags-key, while keeping the old property names deprecated. (#18851)
• Rename the kafka-broker and kafka-connect JMX target systems to experimental-kafka-broker and experimental-kafka-connect; the old names still work for now and log a warning. (#18971)

🌟 New javaagent instrumentation

• Add SOFARPC 5.4 instrumentation that emits RPC client and server spans and metrics. (#15589)
• Add Javaagent instrumentation for HBase client 2.0.0 through 2.5.0. (#18253)

📈 Enhancements

• Add opt-in support for emitting HTTP request exceptions as log signals with otel.semconv.exception.signal.preview=logs. (#16259)
• Add opentelemetry-api-1.63 Javaagent instrumentation for OpenTelemetry API 1.63 and opentelemetry-api-incubator 1.63. (#18911)
• Add otel.semconv-stability.v3-preview as a fallback for the declarative v3_preview semconv stability setting. (#18936)
• Update the experimental stable database semantic-convention opt-in (otel.semconv-stability.opt-in=database) across database instrumentations, including span names and db.* attributes. (#18808, #18853, #18920, #18922, #18926, #18930, #18970, #18979, #18980, #18984, #18985, #18986, #18987, #18989, #18990, #18992, #18993, #19004, #19005)
• Capture query text and parameterization for Cassandra batch statements. (#18964)
• Keep opentelemetry-api and opentelemetry-instrumentation-annotations enabled under otel.instrumentation.common.v3-preview even when default-enabled=false. (#18792)
• When otel.instrumentation.common.v3-preview is enabled, affected instrumentations emit user.* identity attributes instead of enduser.* ones. (#18795)
• Disable Kafka client metrics by default when otel.instrumentation.common.v3-preview=true. (#18828)
• Recognize Amazon Aurora DSQL and AWS wrapper JDBC URL prefixes when parsing JDBC connection metadata. (#18831)
• Set instrumentation versions on emitted Meter scopes. (#18866)
• Run @WithSpan instrumentation after other instrumentations so other advice can attach attributes to the active span. (#18874)
• Emit database client failures as db.client.operation.exception logs when otel.semconv.exception.signal.preview is enabled. (#18889)
• Emit RPC exceptions as log records when otel.semconv.exception.signal.preview=logs is enabled. (#18890)
• Emit messaging exceptions as log records under otel.semconv.exception.signal.preview. (#18891)
• Emit faas.invocation.exception log records for FaaS exceptions when otel.semconv.exception.signal.preview=logs is enabled. (#18892)
• Emit gen_ai.client.operation.exception logs for OpenAI chat and embeddings failures when otel.semconv.exception.signal.preview=logs is enabled. (#18893)
• Emit AWS SDK request failures as rpc.client.call.exception log records when otel.semconv.exception.signal.preview=logs is enabled. (#18894)
• Declarative configuration now supports per-domain semantic-convention selection using semconv.version, semconv.experimental, and semconv.dual_emit settings. (#18908)
• When otel.instrumentation.common.v3-preview is enabled, use otel.semconv-stability.preview instead of otel.semconv-stability.opt-in to opt in to the nonstable service.peer and rpc semantic conventions. (#18914)
• Disable Kotlin coroutines @WithSpan instrumentation by default when otel.instrumentation.common.v3-preview=true. (#18919)
• Use the summary-aware path in SqlQueryAnalyzer.analyze() when otel.instrumentation.common.v3-preview is enabled. (#18921)
• When otel.instrumentation.common.v3-preview is enabled, deprecated JDBC/db sanitization config names are ignored in favor of db.query_sanitization.enabled. (#18934)
• Include jvm.gc.cause on GC duration metrics when otel.instrumentation.common.v3-preview is enabled. (#18967)
• Emit duration metrics for JDBC transaction operations COMMIT and ROLLBACK. (#19003)
• Use a generated InstrumentationVersion class in OkHttp 3.0 instead of reading embedded version properties, avoiding Android StrictMode disk-read violations. (#19006)
• Add thread details span attributes for declarative Spring starter configuration when distribution.spring_starter.thread_details_enabled is set. (#19008)

🛠️ Bug fixes

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-logback-mdc-1.0's changelog.

Changelog

Unreleased

Version 2.30.0 (2026-07-22)

This release targets the OpenTelemetry SDK 1.64.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Remove ExperimentalInstrumentationModule#getModuleGroup(). Built-in invokedynamic modules now share a single InstrumentationModuleClassLoader, and each extension is isolated in its own. (#18859)
• Remove the deprecated InstrumentationModule.isIndyModule(); whether a module uses invokedynamic is now determined by the agent rather than declared per module. (#19140)
• Remove deprecated query-related APIs from SqlClientAttributesGetter, CassandraRequest, and Experimental. (#19165)
• Remove the deprecated Enduser* attribute-capturing APIs from the Spring Security 6.0 library; use the User* replacements instead. (#19168)

🚫 Deprecations

• Deprecate only the Spring Boot starter ConfigProperties compatibility bean used with experimental declarative configuration, in favor of the new ConfigProvider bean; it will be removed in 3.0. The ConfigProperties bean remains supported for non-declarative configuration. (#19175)
• Deprecate DeclarativeConfigPropertiesBridge and DeclarativeConfigPropertiesBridgeBuilder. Use DeclarativeConfigProperties directly or DeclarativeConfigBridge instead. Will be removed in 3.0. (#19202)
• Deprecate ConfigPropertiesBackedConfigProvider in favor of DeclarativeConfigBridge. It will be removed in 2.31.0. (#19220)

🌟 New javaagent instrumentation

• Add Javaagent instrumentation for HBase client 1.4. (#19087)

🌟 New library instrumentation

• Add library instrumentation (ThriftTelemetry) for the Apache Thrift 0.13 async server.

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry:opentelemetry-api from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-exporter-logging from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-exporter-logging's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

• BREAKING Prometheus: Drop deprecated PrometheusMetricReader constructors (#8541)
• OTLP: Reject host-less endpoints in EndpointUtil.validateEndpoint (#8489)
• OTLP: Replace Jackson OTLP JSON serialization with a hand-rolled implementation (#8545)
• OTLP Profiles: Fix OtlpGrpcProfileExporter toString class name (#8492)
• Prometheus: Add translation strategy support (#8346)
• Prometheus: Fix serialization of array-valued scope and resource attributes to JSON strings (#8497)

Extensions

• BREAKING Declarative config: Move experimental types to internal package (#8530)
• Declarative config: Commit generated schema POJOs to git (#8408)
• Declarative config: Update to opentelemetry-configuration v1.1.0 (#8451)
• Declarative config: Adjust POJO toString/hashCode/equals to match AutoValue semantics (#8526)
• Declarative config: Add ref descriptions to generated model classes (#8540)
• Declarative config: Emit consistent @JsonProperty annotations on generated models (#8563)
• Declarative config: Remove duplicate resolver in DeclarativeConfigPropertyUtil (#8579)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-exporter-logging's changelog.

Version 1.64.0 (2026-07-10)

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize exemplar reservoir storage in FixedSizeExemplarReservoir (#8524)
• Use failExceptionally in PeriodicMetricReader when the exporter is busy (#8525)
• Only set valuesRecorded in AggregatorHandle when false (#8559)
• Use volatile instead of atomics in Double/LongLastValueAggregator (#8560)
• Randomize per-thread recording order in metric benchmarks to avoid concurrency hotspots (#8550)

Logs

• Fix BatchLogRecordProcessor worker thread being killed by non-runtime exceptions (#8529)

Exporters

... (truncated)

Commits

• fd4d976 [release/v1.64.x] Prepare release 1.64.0 (#8585)
• 0260567 Prepare 1.64.0 (#8582)
• 6ee54e5 Fix serialization of array-valued scope and resource attributes in Prometheus...
• 0004c7e Use shared workflow failure issue (#8581)
• 4079ece Add BatchSpanProcessor.create(SpanExporter) to match SimpleSpanProcessor (#8564)
• e29f345 Remove duplicate declarative config resolver (#8579)
• 7f3d549 Replace jackson OTLP json serialization with handrolled version (#8545)
• 91cbb32 Update otelbot token workflows to use client IDs (#8580)
• 38dfb98 Update fossas/fossa-action action to v2 (#8577)
• d79e509 Update weekly update (#8576)
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.63.0 to 1.64.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.64.0

API

• Fix W3CBaggagePropagator to allow empty baggage values per W3C spec (#8468)
• Fix baggage parsing for invalid percent-encoded members (#8480)

Incubating

• BREAKING Remove deprecated InstrumentationConfigUtil.peerServiceMapping (#8542)
• Fix EnvironmentGetter/EnvironmentSetter to not enumerate or normalize carrier entries, and normalize empty names consistently (#8474, #8481)

SDK

Traces

• Add BatchSpanProcessor.create(SpanExporter) convenience factory to mirror SimpleSpanProcessor.create(SpanExporter) (#8564)
• Fix BatchSpanProcessor benchmark aux counters (exportedSpans/droppedSpans) always reporting zero (#8539)

Metrics

• Fix PooledHashMap dropping live entries when an entry is removed during forEach (#8499)
• Safely initialize e...

  Description has been truncated