Bump the opentelemetry group across 1 directory with 8 updates

[dependabot]

Bumps the opentelemetry group with 8 updates in the / directory:

Package	From	To
io.opentelemetry:opentelemetry-bom	1.61.0	1.62.0
io.opentelemetry:opentelemetry-bom-alpha	1.61.0-alpha	1.62.0-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom	2.27.0	2.28.1
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha	2.27.0-alpha	2.28.1-alpha
io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator	2.27.0-alpha	2.28.1-alpha
io.opentelemetry.contrib:opentelemetry-jfr-connection	1.56.0-alpha	1.57.0-alpha
io.opentelemetry.contrib:opentelemetry-runtime-attach-core	1.56.0-alpha	1.57.0-alpha
io.opentelemetry.instrumentation:gradle-plugins	2.27.0-alpha	2.28.1-alpha

Updates io.opentelemetry:opentelemetry-bom from 1.61.0 to 1.62.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.62.0

API

Context

• Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

• Avoid parentContext allocation on span start for the common case (#8332)

Metrics

• Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
• Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

• BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
• BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
• OTLP: Fix null input handling in StringEncoder (#8312)
• OTLP: Align proto field types and wire tag names in marshalers (#8293)
• OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
• OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
• OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
• OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

• BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
• Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)
• Declarative config: Fix collection fields to not be initialized to empty by default (#8356)
• Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

• Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)
• Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)
• Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

• Add initial OSGi support (#7964)
• Promote ApiUsageLogger to opentelemetry-common public API (#8318)
• Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)
• Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)
• Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.62.0 (2026-05-08)

API

Context

• Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

• Avoid parentContext allocation on span start for the common case (#8332)

Metrics

• Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
• Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

• BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
• BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
• OTLP: Fix null input handling in StringEncoder (#8312)
• OTLP: Align proto field types and wire tag names in marshalers (#8293)
• OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
• OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
• OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
• OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

• BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
• Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits

• d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
• 3a62b7a Prepare 1.62.0 (#8378)
• 893910b docs: Expand SIG meeting welcoming language (#8383)
• 03837d3 Apply baggage limits (#8380)
• cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
• 8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
• 2923430 Add initial OSGi support (#7964)
• 3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
• e224e19 Port event span event bridge from contrib (#8372)
• b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
• Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-bom-alpha from 1.61.0-alpha to 1.62.0-alpha

Release notes

Sourced from io.opentelemetry:opentelemetry-bom-alpha's releases.

Version 1.61.0

API

• Stabilize isEnabled() on Tracer, Logger, and metric instruments (#8200)

Incubating

• BREAKING Update EnvironmentGetter and EnvironmentSetter key normalization to reflect spec changes (#8233)

SDK

Traces

• Retain propagated context when generating random trace IDs (#8263)
• Add rate-limited warning log when BatchSpanProcessor drops spans (#8167)

Metrics

• Track series start time per aggregator rather than at SdkMeterProvider creation time (#8180)
• Capture context class loader during async callback registration (#8091)
• Make include/exclude work correctly with empty (but non-null) lists (#8185)

Logs

• Fix condition for recording successful log processing metrics (#8226)

Exporters

• OTLP: add configurable bounds to response body reading (#8224, #8277)
• OTLP: only throw invalid response exception when gRPC response size < 5 bytes (#8194)
• OTLP: remove duplicate FINEST-level error logging in gRPC exporter (#8216)
• OTLP Profiles: clean up profile signal exporters for consistency (#8172)

Extensions

• BREAKING Autoconfigure: remove deprecated ComponentLoader class (use io.opentelemetry.common.ComponentLoader instead) (#8243)
• Declarative config: fix DeclarativeConfigProperties javadoc to not throw exceptions (#8079)
• Declarative config: resource attribute filtering should include attributes by default (#8177)
• Declarative config: enforce IncludedExcludeModel .included and .excluded are not empty (#8266)
• Autoconfigure: restructure SDK incubator to not depend on autoconfigure internals (#8242)

Project tooling

• Disable Gradle build cache on releases to mitigate supply chain risk (#8254)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​adp2201

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom-alpha's changelog.

Changelog

Unreleased

Version 1.62.0 (2026-05-08)

API

Context

• Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

• Avoid parentContext allocation on span start for the common case (#8332)

Metrics

• Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
• Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

• BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
• BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
• OTLP: Fix null input handling in StringEncoder (#8312)
• OTLP: Align proto field types and wire tag names in marshalers (#8293)
• OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
• OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
• OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
• OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

• BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom from 2.27.0 to 2.28.1

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's releases.

Version 2.28.1

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

🛠️ Bug fixes

• Fix javaagent startup failures when declarative configuration uses bundled contrib components, such as the rule-based routing sampler. (#18813)

Version 2.28.0

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)
• Removed the deprecated otel.instrumentation.servlet.experimental.add-trace-id-request-attribute property; use otel.instrumentation.servlet.experimental.trace-id-request-attribute.enabled instead. (#18237)
• Reshaped the ktor Experimental helper from a class with a companion object to a top-level object. Kotlin source callers (Experimental.emitExperimentalTelemetry(...)) are unaffected, but pre-compiled consumers must be recompiled against the new artifact. (#18343)

🚫 Deprecations

• Deprecate otel.instrumentation.jaxws-cxf-3.0.enabled in favor of otel.instrumentation.jaxws-2.0-cxf-3.0.enabled, and otel.instrumentation.jaxws-metro-2.2.enabled in favor of otel.instrumentation.jaxws-2.0-metro-2.2.enabled. (#18184)

🌟 New javaagent instrumentation

• Add Apache Thrift 0.13 instrumentation for RPC client and server spans and metrics. (#18405)

🌟 New library instrumentation

• Add Apache Thrift 0.13 library instrumentation for RPC client and server spans and metrics. (#18405)

📈 Enhancements

• Couchbase 3.1 javaagent instrumentation now emits the more conventional instrumentation scope name io.opentelemetry.couchbase-3.1 instead of io.opentelemetry.javaagent.couchbase-3.1 when otel.instrumentation.common.v3-preview is enabled. (#18426)
• Wicket resource requests now use the resource reference class name in the server span name when otel.instrumentation.common.v3-preview is enabled. (#18312, #18775)
• Decide whether javaagent helper classes are injected into the application class loader or isolated based on the advice classes used by an instrumentation. (#17815)
• Improve cgroup v2 container ID detection for Podman by supporting additional mountinfo layouts and warning when multiple candidate IDs are found. (#18272)

🛠️ Bug fixes

• Fix Pekko HTTP and Tapir server route tracking so server span names and http.route preserve the most specific matched route across nested directives, exceptions, and timeouts; this may change span names and http.route values for affected routes. (#16390)
• Fix context loss in Finagle HTTP instrumentation across Netty-to-Finagle request conversion and twitter-util Future/Promise asynchronous boundaries. (#17867)
• Fix virtual-thread pinning caused by weak-map stale-entry cleanup running on virtual threads; cleanup now runs from the background thread instead. (#18113)
• Avoid linking batch consumer spans to the ambient consumer span when records or messages have no propagation headers. (#18154)
• Fix resetOnEachOperator() for Reactor 3.1 so it also removes the scheduler hook when instrumentation is disabled. (#18258)
• End spans when RxJava 1.0 subscriptions throw synchronously. (#18265)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom's changelog.

Version 2.28.1 (2026-05-20)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

🛠️ Bug fixes

• Fix javaagent startup failures when declarative configuration uses bundled contrib components, such as the rule-based routing sampler. (#18813)

Version 2.28.0 (2026-05-19)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)
• Removed the deprecated otel.instrumentation.servlet.experimental.add-trace-id-request-attribute property; use otel.instrumentation.servlet.experimental.trace-id-request-attribute.enabled instead. (#18237)

... (truncated)

Commits

• 7ad453a [release/v2.28.x] Prepare release 2.28.1 (#18818)
• 1f0b4b2 Prepare change log for upcoming patch release (#18816)
• f4b9d76 [release/v2.28.x] fix(deps): update opentelemetry-java-contrib monorepo to v1...
• 9ef68e6 [release/v2.28.x] Prepare release 2.28.0 (#18791)
• 5d26f13 Draft release notes (#18774)
• 3754062 Gate Wicket resource span names on v3 preview (#18775)
• f6f123d Preserve Spring resource provider class names (#18785)
• 4c6155a Normalize internal and resource javaagent packages (#18746)
• d7b88ce Rename servlet common root package (#18778)
• d52a5ff Rename servlet common snippet package (#18777)
• Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.27.0-alpha to 2.28.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.28.0

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)
• Removed the deprecated otel.instrumentation.servlet.experimental.add-trace-id-request-attribute property; use otel.instrumentation.servlet.experimental.trace-id-request-attribute.enabled instead. (#18237)
• Reshaped the ktor Experimental helper from a class with a companion object to a top-level object. Kotlin source callers (Experimental.emitExperimentalTelemetry(...)) are unaffected, but pre-compiled consumers must be recompiled against the new artifact. (#18343)

🚫 Deprecations

• Deprecate otel.instrumentation.jaxws-cxf-3.0.enabled in favor of otel.instrumentation.jaxws-2.0-cxf-3.0.enabled, and otel.instrumentation.jaxws-metro-2.2.enabled in favor of otel.instrumentation.jaxws-2.0-metro-2.2.enabled. (#18184)

🌟 New javaagent instrumentation

• Add Apache Thrift 0.13 instrumentation for RPC client and server spans and metrics. (#18405)

🌟 New library instrumentation

• Add Apache Thrift 0.13 library instrumentation for RPC client and server spans and metrics. (#18405)

📈 Enhancements

• Couchbase 3.1 javaagent instrumentation now emits the more conventional instrumentation scope name io.opentelemetry.couchbase-3.1 instead of io.opentelemetry.javaagent.couchbase-3.1 when otel.instrumentation.common.v3-preview is enabled. (#18426)
• Wicket resource requests now use the resource reference class name in the server span name when otel.instrumentation.common.v3-preview is enabled. (#18312, #18775)
• Decide whether javaagent helper classes are injected into the application class loader or isolated based on the advice classes used by an instrumentation. (#17815)
• Improve cgroup v2 container ID detection for Podman by supporting additional mountinfo layouts and warning when multiple candidate IDs are found. (#18272)

🛠️ Bug fixes

• Fix Pekko HTTP and Tapir server route tracking so server span names and http.route preserve the most specific matched route across nested directives, exceptions, and timeouts; this may change span names and http.route values for affected routes. (#16390)
• Fix context loss in Finagle HTTP instrumentation across Netty-to-Finagle request conversion and twitter-util Future/Promise asynchronous boundaries. (#17867)
• Fix virtual-thread pinning caused by weak-map stale-entry cleanup running on virtual threads; cleanup now runs from the background thread instead. (#18113)
• Avoid linking batch consumer spans to the ambient consumer span when records or messages have no propagation headers. (#18154)
• Fix resetOnEachOperator() for Reactor 3.1 so it also removes the scheduler hook when instrumentation is disabled. (#18258)
• End spans when RxJava 1.0 subscriptions throw synchronously. (#18265)
• Fix Spring Boot service version auto-detection so META-INF/build-info.properties is read from the jar root instead of BOOT-INF/classes/. (#18292)
• Clear the Netty VirtualField after finishing a response in the Netty 3.8 server instrumentation. (#18358)
• Fix JarDetails to close JarFile handles while reading archives and embedded jars, preventing resource leaks during runtime telemetry collection. (#18385)
• Fix a NullPointerException when converting an agent context without an associated application context to an application context. (#18444)
• Fix Ktor server instrumentation to prevent OpenTelemetry context leaks caused by incomplete coroutine context restoration. (#18456)
• Fix Vert.x sub-router http.route attributes by prepending the mount point to the relative route path; this may change server span names and http.route values for mounted sub-routes. (#18462)
• Fix oshi metrics startup and RSS memory reporting with oshi 7.0.0. (#18478)
• Fix Play MVC and Play WS instrumentation on Play 3.x applications. (#18624)
• Record an error receive span when a wrapped Kafka consumer poll() fails. (#18625)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.28.1 (2026-05-20)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

🛠️ Bug fixes

• Fix javaagent startup failures when declarative configuration uses bundled contrib components, such as the rule-based routing sampler. (#18813)

Version 2.28.0 (2026-05-19)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator from 2.27.0-alpha to 2.28.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator's releases.

Version 2.28.0

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)
• Removed the deprecated otel.instrumentation.servlet.experimental.add-trace-id-request-attribute property; use otel.instrumentation.servlet.experimental.trace-id-request-attribute.enabled instead. (#18237)
• Reshaped the ktor Experimental helper from a class with a companion object to a top-level object. Kotlin source callers (Experimental.emitExperimentalTelemetry(...)) are unaffected, but pre-compiled consumers must be recompiled against the new artifact. (#18343)

🚫 Deprecations

• Deprecate otel.instrumentation.jaxws-cxf-3.0.enabled in favor of otel.instrumentation.jaxws-2.0-cxf-3.0.enabled, and otel.instrumentation.jaxws-metro-2.2.enabled in favor of otel.instrumentation.jaxws-2.0-metro-2.2.enabled. (#18184)

🌟 New javaagent instrumentation

• Add Apache Thrift 0.13 instrumentation for RPC client and server spans and metrics. (#18405)

🌟 New library instrumentation

• Add Apache Thrift 0.13 library instrumentation for RPC client and server spans and metrics. (#18405)

📈 Enhancements

• Couchbase 3.1 javaagent instrumentation now emits the more conventional instrumentation scope name io.opentelemetry.couchbase-3.1 instead of io.opentelemetry.javaagent.couchbase-3.1 when otel.instrumentation.common.v3-preview is enabled. (#18426)
• Wicket resource requests now use the resource reference class name in the server span name when otel.instrumentation.common.v3-preview is enabled. (#18312, #18775)
• Decide whether javaagent helper classes are injected into the application class loader or isolated based on the advice classes used by an instrumentation. (#17815)
• Improve cgroup v2 container ID detection for Podman by supporting additional mountinfo layouts and warning when multiple candidate IDs are found. (#18272)

🛠️ Bug fixes

• Fix Pekko HTTP and Tapir server route tracking so server span names and http.route preserve the most specific matched route across nested directives, exceptions, and timeouts; this may change span names and http.route values for affected routes. (#16390)
• Fix context loss in Finagle HTTP instrumentation across Netty-to-Finagle request conversion and twitter-util Future/Promise asynchronous boundaries. (#17867)
• Fix virtual-thread pinning caused by weak-map stale-entry cleanup running on virtual threads; cleanup now runs from the background thread instead. (#18113)
• Avoid linking batch consumer spans to the ambient consumer span when records or messages have no propagation headers. (#18154)
• Fix resetOnEachOperator() for Reactor 3.1 so it also removes the scheduler hook when instrumentation is disabled. (#18258)
• End spans when RxJava 1.0 subscriptions throw synchronously. (#18265)
• Fix Spring Boot service version auto-detection so META-INF/build-info.properties is read from the jar root instead of BOOT-INF/classes/. (#18292)
• Clear the Netty VirtualField after finishing a response in the Netty 3.8 server instrumentation. (#18358)
• Fix JarDetails to close JarFile handles while reading archives and embedded jars, preventing resource leaks during runtime telemetry collection. (#18385)
• Fix a NullPointerException when converting an agent context without an associated application context to an application context. (#18444)
• Fix Ktor server instrumentation to prevent OpenTelemetry context leaks caused by incomplete coroutine context restoration. (#18456)
• Fix Vert.x sub-router http.route attributes by prepending the mount point to the relative route path; this may change server span names and http.route values for mounted sub-routes. (#18462)
• Fix oshi metrics startup and RSS memory reporting with oshi 7.0.0. (#18478)
• Fix Play MVC and Play WS instrumentation on Play 3.x applications. (#18624)
• Record an error receive span when a wrapped Kafka consumer poll() fails. (#18625)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator's changelog.

Changelog

Unreleased

Version 2.28.1 (2026-05-20)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

🛠️ Bug fixes

• Fix javaagent startup failures when declarative configuration uses bundled contrib components, such as the rule-based routing sampler. (#18813)

Version 2.28.0 (2026-05-19)

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (#18223)
• Removed previously deprecated experimental config properties otel.instrumentation.http.client.experimental.redact-query-parameters and otel.instrumentation.common.experimental.db-sqlcommenter.enabled; use otel.instrumentation.sanitization.url.experimental.sensitive-query-parameters and otel.instrumentation.common.db.experimental.sqlcommenter.enabled instead. (#18229)

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator from 2.27.0-alpha to 2.28.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-incubator's releases.

Version 2.28.0

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Removed the obsolete internal ClassInjector/ProxyInjectionBuilder API used by the old ExperimentalInstrumentationModule.injectClasses(ClassInjector) path; use ExperimentalInstrumentationModule.exposedClassNames() instead. (#18112)
• Removed previously deprecated non-stable API methods and the deprecated opentelemetry-runtime-telemetry-java8 and opentelemetry-runtime-telemetry-java17 library aliases. (#18136)
• Removed the previously deprecated captureEventName library builder setting from the logback-appender-1.0 and log4j-appender-2.17 OpenTelemetryAppender, and the corresponding otel.instrumentation.{logback-appender,log4j-appender,jboss-logmanager}.experimental.capture-event-name javaagent properties. Use the otel.event.name key in MDC / context data / key-value pairs / Logstash markers / structured arguments instead. (Description has been truncated

[xiang17]

The breaking change happened:

• in this PR: Pin testLatestDeps versions for reproducible builds open-telemetry/opentelemetry-java-instrumentation#16344
• in this file https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/gradle-plugins/src/main/kotlin/io/opentelemetry/javaagent/muzzle/MuzzleDirective.kt

In older plugin versions (2.27.0-alpha), MuzzleDirective had a helper method coreJdk() that internally did coreJdk.set(true).
In newer plugin versions (2.28.1-alpha), that helper method was removed, and only the Property remains.