Update dependency io.micrometer:micrometer-core to v1.13.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.micrometer:micrometer-core	1.5.5 -> 1.13.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

micrometer-metrics/micrometer (io.micrometer:micrometer-core)

v1.13.5: 1.13.5

Compare Source

🐞 Bug Fixes

• ConcurrentModificationException when late meter filters are added #​5489

🔨 Dependency Upgrades

• Bump com.signalfx.public:signalfx-java from 1.0.45 to 1.0.46 #​5506
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.19 to 1.7.21 #​5505

Tasks

• Use Prometheus BOMs for dependency management #​5468

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​mabartos, @​emmanuel-ferdman, and @​izeye

v1.13.4: 1.13.4

Compare Source

🐞 Bug Fixes

• BOM contains a non-resolvable dependency: io.micrometer:concurrency-tests #​5395
• Zero percentile can be missing from Dynatrace meters where expected #​4750

📔 Documentation

• Fix a typo in meters.adoc #​5399

🔨 Dependency Upgrades

• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.18 to 1.7.19 #​5425
• Bump dropwizard-metrics from 4.2.26 to 4.2.27 #​5423
• Bump com.signalfx.public:signalfx-java from 1.0.44 to 1.0.45 #​5420

📝 Tasks

• Bump org.apache.maven:maven-resolver-provider from 3.9.8 to 3.9.9 #​5426
• Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 #​5424
• Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 #​5422
• Bump spring-javaformat from 0.0.42 to 0.0.43 #​5421
• Bump org.postgresql:postgresql from 42.7.3 to 42.7.4 #​5418
• Fix GuavaCacheMetricsTest and CaffeineCacheMetricsTest #​5405

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​madhead

v1.13.3: 1.13.3

Compare Source

🐞 Bug Fixes

• Add default factoryType tag in CommonsObjectPool2Metrics #​5316
• Buffered statsd lines are not published on close #​2141
• Disable kotlinSourcesJar since it conflicts with sourcesJar #​5151

📔 Documentation

• Make more explicit that recording a metric is safe to call #​5365

🔨 Dependency Upgrades

• Bump com.fasterxml.jackson.core:jackson-databind from 2.17.1 to 2.17.2 #​5364
• Bump com.gradle.develocity from 3.17.5 to 3.17.6 #​5357
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.14 to 1.7.17 #​5356
• Bump com.signalfx.public:signalfx-java from 1.0.43 to 1.0.44 #​5362
• Bump io.netty:netty-bom from 4.1.111.Final to 4.1.112.Final #​5360
• Bump io.projectreactor:reactor-bom from 2022.0.20 to 2022.0.21 #​5358
• Bump jersey3 from 3.0.11 to 3.0.12 #​5378
• Bump jetty9 from 9.4.54.v20240208 to 9.4.55.v20240627 #​5361
• Bump org.jetbrains.kotlin.jvm from 1.9.23 to 1.9.24 #​5294

📝 Tasks

• Make PrometheusMeterRegistryTest less flaky #​5302
• Migrate to io.spring.develocity.conventions:0.0.19 #​5312
• Apply test-retry settings to all tests #​5303

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​HYEONSEOK1, @​BJMg, and @​cbrachem

v1.13.2: 1.13.2

Compare Source

🐞 Bug Fixes

• Avoid calling naming convention on scrape #​5288
• Fix histogram consistency in PrometheusMeterRegistry #​5193
• Fix log to include stack trace in OtlpMeterRegistry.publish() #​5141

🔨 Dependency Upgrades

• Bump software.amazon.awssdk:cloudwatch from 2.25.69 to 2.25.70 #​5277
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.13 to 1.7.14 #​5276
• Bump com.signalfx.public:signalfx-java from 1.0.42 to 1.0.43 #​5272

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​shalk

v1.13.1: 1.13.1

Compare Source

🔨 Dependency Upgrades

• Bump dropwizard-metrics from 4.2.25 to 4.2.26 #​5215
• Bump org.apache.felix:org.apache.felix.scr from 2.2.10 to 2.2.12 #​5208
• Bump software.amazon.awssdk:cloudwatch from 2.25.64 to 2.25.69 #​5202
• Bump org.hdrhistogram:HdrHistogram from 2.2.1 to 2.2.2 #​5190
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.12 to 1.7.13 #​5186
• Bump com.signalfx.public:signalfx-java from 1.0.41 to 1.0.42 #​5182

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye

v1.13.0: 1.13.0

Compare Source

Micrometer 1.13.0 is the GA version of a new feature release. See our support policy for support timelines and 1.13 Migration Guide for migration details.

Please take a look at the Migration Guide if you use Prometheus since there are breaking changes in the Prometheus registry if you are using the PrometheusMeterRegistry API in your code.

Below are the combined release notes of all the pre-release milestones and release candidate preceding it.

⚠️ Noteworthy

• Deprecate Jersey server instrumentation in favour of the jersey-micrometer module in Jersey #​4100
• Add support for Prometheus client 1.x #​4846 (please see the Migration Guide)
• Deprecate instrumentation for Jetty 9, 10, 11 that is out of support #​4779
• Deprecate Hystrix instrumentation #​4587
• JvmHeapPressureMetrics have incorrect base unit #​3236
• Remove v1 CloudWatch module #​1473
• Make DefaultHttpClientObservationConvention#INSTANCE final #​4770
• Downgrade to Mockito 4 from Mockito 5 in micrometer-observation-test module https://github.com/micrometer-metrics/micrometer/issues/4968
• Remove unnecessary mockito dependency in micrometer-test #​4963

⭐ New Features / Enhancements

• Remove unnecessary call to getConventionName in PrometheusMeterRegistry #​4607
• Add log for negative amount in AbstractTimer.record() #​4573
• Add response headers and trailers to gRPC observation context #​4516
• Don't overwrite reserved resource attributes #​4503
• Additional support for OTLP env vars #​4500
• Add database tag to DefaultMongoCommandTagsProvider #​4298
• ObservationGrpcServerInterceptor does not store observation in a context #​4218
• Deprecate Jersey server instrumentation in favour of the jersey-micrometer module in Jersey #​4100
• Missing option to get response headers in GrpcServerObservationConvention #​4012
• Remove metrics when shutting down InstrumentedQueuedThreadPool #​4000
• Support jOOQ 3.15 and later #​3828
• Allow customizing start log message in PushMeterRegistry implementations #​4848
• Manage context-propagation version in micrometer-bom #​4847
• Add support for Prometheus 1.x #​4846
• "Failed to publish metrics to OTLP receiver" error message contains no actionable context #​4829
• Support @Counted on classes #​4746
• Publish a separate module with jdk11 classes #​4728
• Make JettyClientMetrics compatible with Jetty12 #​4609
• Make it possible to disable LongtaskTimer creation in DefaultMeterObservationHandler #​4604
• Add Meter for process CPU time #​4498
• Make Jetty server metrics work with Jetty 12 #​4261
• OTLPMeterRegistry should adhere to OpenTelemetry data model for producing metrics #​4053
• Asserting Observation keys and value should offer suggestions from the other cardinality bucket. #​4046
• Ignore class level AOP annotation if method level present #​3811
• Remove v1 CloudWatch module #​1473
• Log CloudWatch metric data when publishing fails #​1396
• [Dynatrace] debug log in exporter when no meters are registered #​4951
• Warn when a MeterFilter is configured after a meter is registered #​4917
• Allow customizing PrometheusProperties via PrometheusConfig #​4875
• Add Exemplars support to Prometheus 1.x #​4867
• Sanitize metric names for the Prometheus client #​4866
• Add constructor with logger name for WarnThenDebugLogger #​4865
• Do not re-apply MeterFilters to IDs when registering if unnecessary #​4856
• Announce OtlpMeterRegistry configuration found at startup #​4830
• Record Jetty bytes in/out metrics through network listeners #​4514

🐞 Bug Fixes

• com.google.cloud:libraries-bom version is not pinned #​4711
• BOM contains reference to unpublished docs module #​4585
• [Dynatrace] Logging verbosity: Move metadata discrepancy logging to WarnThenDebug #​4583
• ObservationGrpcServerCallListener does not capture an uncontrolled error during the execution of the service logic #​4490
• URL decode headers from environment variables in OtlpConfig #​4595
• @MeterTag does not work on package private method #​4506
• DefaultLongTaskTimer class throws an IllegalArgumentException when percentiles is empty #​4482
• Stackdriver exception trying to publish metrics during shutdown #​4353
• TimeWindowMax throws ArithmeticException with a rotateFrequency of 0 #​3068
• JvmGcMetricsTest#sizeMetricsNotSetToZero is failing on CI with generational ZGC #​4497
• Bug: DropwizardMeterRegistry does not remove Gauges created by LongTaskTimer #​2924
• JvmHeapPressureMetrics have incorrect base unit #​3236
• GC Pause time metric includes concurrent cycle time for Generational ZGC #​4764
• OSGi import of javax.annotation and javax.annotation.meta is incorrect #​4824
• Use Dynatrace snapshot for LongTaskTimer #​4780
• CloudWatchMeterRegistry logs timeout message when there was an interrupt and does not log anything when there was a timeout #​4775
• NullPointerException in DefaultJmsProcessObservationConvention #​4966
• OTLP Gauge datapoint timestamp should be time at sampling #​5044
• AnnotationHandler can't see methods from parent class #​4983
• JettyConnectionMetrics#addToAllConnectors does not configure bytes in/out metrics #​5092
• Do not set explicit unit on Prometheus 1.x Metadata #​5038
• MeterRegistry#removeByPreFilterId returns null when multiple pre-filter IDs map to same ID #​5035
• Use GaugeHistogram for Prometheus LongTaskTimer #​4988

📔 Documentation

• Document newly supported OTLP env vars #​4566
• Observation API bird's eye view #​4726
• Replace full urls to xref wherever it is possible #​4714
• Update docs with changes from old docs site #​4611
• Reference doc update for tomcat #​4599
• Reference doc update for system #​4598
• Reference doc update for mongodb #​4594
• Reference doc update for logging #​4593
• Reference doc update for Kafka #​4592
• Reference doc update for OkHttp #​4586
• Added Jetty reference doc #​4584
• HttpClient reference documentation #​4579
• gRPC reference documentation #​4575
• Database reference documentation #​4574
• Added examples of Apache Commons Pool #​4570
• Added examples of cache usage #​4569
• Clarify time window length in documentation #​4625
• Document Java HttpClient instrumentation #​4752
• Document Jetty bytes in/out instrumentation via NetworkTrafficListener #​4981
• Document support for Prometheus Client 1.x #​4957

🔨 Dependency Upgrades

• Bump com.google.auth:google-auth-library-oauth2-http from 1.22.0 to 1.23.0 #​4732
• Bump dropwizard-metrics from 4.2.23 to 4.2.25 #​4663
• Downgrade okhttp to 4.11.0 upgrade Kotlin to 1.9 #​4597
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.715 to 1.12.720 #​5089
• Bump software.amazon.awssdk:cloudwatch from 2.25.45 to 2.25.50 #​5084
• Bump org.hdrhistogram:HdrHistogram from 2.1.12 to 2.2.1 #​5052
• Bump jersey2 from 2.42 to 2.43 #​5047
• Bump com.google.cloud:libraries-bom from 26.37.0 to 26.38.0 #​5025
• Bump com.signalfx.public:signalfx-java from 1.0.40 to 1.0.41 #​5024
• Bump io.opentelemetry.proto:opentelemetry-proto from 1.1.0-alpha to 1.2.0-alpha #​5021
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.11 to 1.7.12 #​5014
• Bump com.dynatrace.metric.util:dynatrace-metric-utils-java from 2.2.0 to 2.2.1 #​5012
• Bump com.google.cloud:google-cloud-monitoring from 3.42.0 to 3.43.0 #​5011

📝 Tasks

• Update gRPC trailers metadata consumption by observation context #​4612
• Add sample for MultiGauge #​4618
• Enable whenConnectionCheckedInAfterPoolClose_thenNoExceptionThrown() #​4603
• Clarify complete expiry of distribution statistics in Javadoc #​4581
• Remove JDK 19-specific tests in TagsTest #​4512
• Use LongAdder in CumulativeTimer and CumulativeDistributionSummary #​4496
• Add integration tests for Prometheus #​5039

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​MartinUhlen, @​zeitlinger, @​pirgeo, @​nathankooij, @​ttddyy, @​wakingrufus, @​climategadgets, @​monosoul, @​quaff, @​ponziani, @​simonzn, @​adpaste, @​joakime, @​lenin-jaganathan, @​cachescrubber, @​heowc, @​pichlermarc, @​tdinev, and @​MartinUhlen

v1.12.10: 1.12.10

Compare Source

🐞 Bug Fixes

• Zero percentile can be missing from Dynatrace meters where expected #​4750

📔 Documentation

• Fix a typo in meters.adoc #​5399

🔨 Dependency Upgrades

• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.767 to 1.12.770 #​5457
• Bump com.signalfx.public:signalfx-java from 1.0.44 to 1.0.45 #​5454
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.18 to 1.7.19 #​5453
• Bump dropwizard-metrics from 4.2.26 to 4.2.27 #​5450

📝 Tasks

• Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 #​5458
• Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 #​5456
• Bump spring-javaformat from 0.0.42 to 0.0.43 #​5452
• Bump org.apache.maven:maven-resolver-provider from 3.9.8 to 3.9.9 #​5451
• Fix GuavaCacheMetricsTest and CaffeineCacheMetricsTest #​5405

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​madhead

v1.12.9: 1.12.9

Compare Source

🐞 Bug Fixes

• Add default factoryType tag in CommonsObjectPool2Metrics #​5316
• Buffered statsd lines are not published on close #​2141
• Disable kotlinSourcesJar since it conflicts with sourcesJar #​5151

📔 Documentation

• Make more explicit that recording a metric is safe to call #​5365

🔨 Dependency Upgrades

• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.755 to 1.12.767 #​5343
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.14 to 1.7.18 #​5373
• Bump com.signalfx.public:signalfx-java from 1.0.43 to 1.0.44 #​5341
• Bump jersey3 from 3.0.11 to 3.0.12 #​5377
• Bump org.jetbrains.kotlin.jvm from 1.9.23 to 1.9.24 #​5069

📝 Tasks

• Migrate to io.spring.develocity.conventions:0.0.19 #​5312
• Apply test-retry settings to all tests #​5303
• Bump org.mongodb:mongodb-driver-sync from 4.11.2 to 4.11.3 #​5375
• Bump maven-resolver from 1.9.20 to 1.9.22 #​5374
• Bump org.awaitility:awaitility from 4.2.1 to 4.2.2 #​5372
• Bump io.netty:netty-bom from 4.1.111.Final to 4.1.112.Final #​5345
• Bump com.gradle.develocity from 3.17.5 to 3.17.6 #​5344
• Bump jetty9 from 9.4.54.v20240208 to 9.4.55.v20240627 #​5342
• Bump io.projectreactor:reactor-bom from 2022.0.20 to 2022.0.21 #​5340

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​HYEONSEOK1, @​BJMg, and @​cbrachem

v1.12.8: 1.12.8

Compare Source

🔨 Dependency Upgrades

• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.739 to 1.12.755 #​5284
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.13 to 1.7.14 #​5250
• Bump com.signalfx.public:signalfx-java from 1.0.42 to 1.0.43 #​5249

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​ttddyy

v1.12.7: 1.12.7

Compare Source

🔨 Dependency Upgrades

• Bump org.apache.felix:org.apache.felix.scr from 2.2.10 to 2.2.12 #​5214
• Bump dropwizard-metrics from 4.2.25 to 4.2.26 #​5204
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.734 to 1.12.739 #​5198
• Bump com.signalfx.public:signalfx-java from 1.0.41 to 1.0.42 #​5175
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.12 to 1.7.13 #​5174

v1.12.6: 1.12.6

Compare Source

⚠️ Noteworthy

• Downgrade to Mockito 4 from Mockito 5 in micrometer-observation-test module https://github.com/micrometer-metrics/micrometer/issues/4968

🐞 Bug Fixes

• NullPointerException in DefaultJmsProcessObservationConvention #​4966
• OTLP Gauge datapoint timestamp should be time at sampling #​5044
• AnnotationHandler can't see methods from parent class #​4983

🔨 Dependency Upgrades

• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.696 to 1.12.720 #​5042 #​5086
• Bump com.dynatrace.metric.util:dynatrace-metric-utils-java from 2.2.0 to 2.2.1 #​5005
• Bump com.signalfx.public:signalfx-java from 1.0.40 to 1.0.41 #​5000
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.11 to 1.7.12 #​4994

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​tdinev, @​lenin-jaganathan and @​MartinUhlen

v1.12.5: 1.12.5

Compare Source

⭐ New Features

• Deprecate DefaultUriMapper and PoolingHttpClientConnectionManagerMetricsBinder in httpcomponents #​4862
• Use same description for same meter name in Log4j2Metrics #​4864

🔨 Dependency Upgrades

• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.691 to 1.12.696 #​4926
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.8 to 1.7.11 #​4925
• Bump com.signalfx.public:signalfx-java from 1.0.39 to 1.0.40 #​4907

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye

v1.12.4: 1.12.4

Compare Source

Noteworthy

• Make DefaultHttpClientObservationConvention#INSTANCE final #​4770

🐞 Bug Fixes

• GC Pause time metric includes concurrent cycle time for Generational ZGC #​4764
• OSGi import of javax.annotation and javax.annotation.meta is incorrect #​4824
• Use Dynatrace snapshot for LongTaskTimer #​4780
• CloudWatchMeterRegistry logs timeout message when there was an interrupt and does not log anything when there was a timeout #​4775

🔨 Dependency Upgrades

• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.7 to 1.7.8 #​4839
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.655 to 1.12.674 #​4834
• Bump com.signalfx.public:signalfx-java from 1.0.38 to 1.0.39 #​4822

📝 Tasks

• ArchUnit 1.x is pulling in slf4j 2.x #​4777
• Replace deprecated buildDir #​4771

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​ponziani, @​adpaste, and @​pirgeo

v1.12.3: 1.12.3

Compare Source

🐞 Bug Fixes

• com.google.cloud:libraries-bom version is not pinned #​4711
• BOM contains reference to unpublished docs module #​4585
• [Dynatrace] Logging verbosity: Move metadata discrepancy logging to WarnThenDebug #​4583
• ObservationGrpcServerCallListener does not capture an uncontrolled error during the execution of the service logic #​4490
• URL decode headers from environment variables in OtlpConfig #​4595
• @MeterTag does not work on package private method #​4506
• DefaultLongTaskTimer class throws an IllegalArgumentException when percentiles is empty #​4482
• Stackdriver exception trying to publish metrics during shutdown #​4353
• TimeWindowMax throws ArithmeticException with a rotateFrequency of 0 #​3068
• JvmGcMetricsTest#sizeMetricsNotSetToZero is failing on CI with generational ZGC #​4497
• Bug: DropwizardMeterRegistry does not remove Gauges created by LongTaskTimer #​2924

📔 Documentation

• Observation API bird's eye view #​4726
• Replace full urls to xref wherever it is possible #​4714
• Update docs with changes from old docs site #​4611
• Reference doc update for tomcat #​4599
• Reference doc update for system #​4598
• Reference doc update for mongodb #​4594
• Reference doc update for logging #​4593
• Reference doc update for Kafka #​4592
• Reference doc update for OkHttp #​4586
• Added Jetty reference doc #​4584
• HttpClient reference documentation #​4579
• gRPC reference documentation #​4575
• Database reference documentation #​4574
• Added examples of Apache Commons Pool #​4570
• Added examples of cache usage #​4569
• Clarify time window length in documentation #​4625

🔨 Dependency Upgrades

• Use latest release (1.1.1) of context-propagation #​4745
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.651 to 1.12.655 #​4742
• Bump testcontainers from 1.19.4 to 1.19.5 #​4734
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.650 to 1.12.651 #​4722
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.4 to 1.7.7 #​4721
• Bump dynatrace-metric-utils-java to 2.2.0 #​4713
• Bump com.diffplug.spotless:spotless-plugin-gradle to 6.25.0 #​4706
• Bump io.spring.ge.conventions from 0.0.14 to 0.0.15 #​4690
• Bump org.gradle.toolchains.foojay-resolver-convention from 0.7.0 to 0.8.0 #​4689
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.649 to 1.12.650 #​4688
• Bump com.gradle.enterprise from 3.16.1 to 3.16.2 #​4673
• Bump org.apache.tomcat.embed:tomcat-embed-core from 8.5.97 to 8.5.98 #​4672
• Bump io.netty:netty-bom from 4.1.104.Final to 4.1.106.Final #​4668
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.629 to 1.12.649 #​4667
• Bump dropwizard-metrics from 4.2.23 to 4.2.25 #​4665
• Bump io.projectreactor:reactor-bom from 2022.0.14 to 2022.0.15 #​4662
• Bump org.apache.felix:org.apache.felix.scr from 2.2.6 to 2.2.10 #​4661
• Bump uk.org.webcompere:system-stubs-jupiter from 2.1.5 to 2.1.6 #​4658
• Bump spring-javaformat from 0.0.40 to 0.0.41 #​4657
• Bump testcontainers from 1.19.3 to 1.19.4 #​4656
• Update dynatrace-metric-utils-java to 2.1.0 #​4565

📝 Tasks

• Bump org.junit.platform:junit-platform-launcher from 1.10.1 to 1.10.2 #​4738
• Bump junit from 5.10.1 to 5.10.2 #​4737
• Remove usage of deprecated deploy step in CircleCI config #​4562
• Upgrade to logback-classic 1.4.14 #​4712
• Upgrade CI machine image to ubuntu-2204:2024.01.1 #​4631
• Upgrade CI image JDK to 8.0.402, 11.0.22, 17.0.10, 21.0.2 #​4630
• Add sample for MultiGauge #​4618
• Enable whenConnectionCheckedInAfterPoolClose_thenNoExceptionThrown() #​4603
• Clarify complete expiry of distribution statistics in Javadoc #​4581
• Remove JDK 19-specific tests in TagsTest #​4512
• Use LongAdder in CumulativeTimer and CumulativeDistributionSummary #​4496

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​MartinUhlen, @​zeitlinger, and @​pirgeo

v1.12.2: 1.12.2

Compare Source

🐞 Bug Fixes

• java.lang.NullPointerException in DefaultJmsPublishObservationConvention #​4505
• micrometer-registry-statsd POM file is invalid #​4492
• Thread that rolls over meters in StepMeterRegistry shares same name with publishing thread #​3837

🔨 Dependency Upgrades

• Bump org.springframework.cloud:spring-cloud-dependencies from 2021.0.8 to 2021.0.9 #​4528
• Bump com.gradle.enterprise from 3.16 to 3.16.1 #​4527
• Bump software.amazon.awssdk:cloudwatch from 2.21.41 to 2.21.46 #​4526
• Bump org.aspectj:aspectjweaver from 1.9.20.1 to 1.9.21 #​4525
• Bump io.netty:netty-bom from 4.1.101.Final to 4.1.104.Final #​4524
• Bump org.apache.tomcat.embed:tomcat-embed-core from 8.5.96 to 8.5.97 #​4522
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.608 to 1.12.629 #​4521
• Bump io.projectreactor:reactor-bom from 2022.0.13 to 2022.0.14 #​4520
• Bump com.signalfx.public:signalfx-java from 1.0.37 to 1.0.38 #​4519

📝 Tasks

• Fix concurrency in grpc test #​4517

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​ttddyy

v1.12.1: 1.12.1

Compare Source

🐞 Bug Fixes

• Duplicate publishing of data if registry closes within one step #​4357

🔨 Dependency Upgrades

• Bump com.gradle.enterprise from 3.15.1 to 3.16 #​4481
• Bump com.tngtech.archunit:archunit-junit5 from 1.2.0 to 1.2.1 #​4472
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.3 to 1.7.4 #​4471
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.593 to 1.12.608 #​4468
• Bump com.netflix.nebula:nebula-release-plugin from 18.0.4 to 18.0.8 #​4466
• Bump software.amazon.awssdk:cloudwatch from 2.21.27 to 2.21.41 #​4459
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.2.3 #​4434
• Bump com.github.charithe:kafka-junit from 4.2.7 to 4.2.10 #​4433
• Bump org.apache.maven:maven-resolver-provider from 3.9.5 to 3.9.6 #​4431
• Bump com.signalfx.public:signalfx-java from 1.0.36 to 1.0.37 #​4430
• Bump testcontainers from 1.19.2 to 1.19.3 #​4428
• Bump ch.qos.logback:logback-classic from 1.2.12 to 1.2.13 #​4427
• Bump maven-resolver from 1.9.16 to 1.9.18 #​4426
• Bump com.netflix.spectator:spectator-reg-atlas from 1.7.2 to 1.7.3 #​4401
• Bump software.amazon.awssdk:cloudwatch from 2.21.26 to 2.21.27 #​4399
• Bump io.projectreactor:reactor-bom from 2022.0.12 to 2022.0.13 #​4389
• Bump software.amazon.awssdk:cloudwatch from 2.21.20 to 2.21.26 #​4385
• Bump spring from 5.3.30 to 5.3.31 #​4384
• Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.586 to 1.12.592 #​4376
• Bump uk.org.webcompere:system-stubs-jupiter from 2.1.4 to 2.1.5 #​4371
• Bump spring-javaformat from 0.0.39 to 0.0.40 #​4369
• Bump testcontainers from 1.19.1 to 1.19.2 #​4366
• Bump org.apache.tomcat.embed:tomcat-embed-core from 8.5.95 to 8.5.96 #​4361

📝 Tasks

• Sync ModifiedClassPathClassLoader from Spring Boot #​4402

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​lenin-jaganathan

v1.12.0: 1.12.0

Compare Source

⭐ New Features

• Support Jetty 12 in JettyConnectionMetrics #​4324
• Support generational ZGC #​4258
• Remove native-image.properties from micrometer-core #​4245
• Add Observation instrumentation for Jakarta JMS #​4007
• Move Jakarta JMS instrumentation to micrometer-jakarta9 #​4201
• Add shortcut to assign dynamic tags to Meters #​535
• Support new CSP auth method for Wavefront (AOA) #​4054
• Add hasAnObservationWithAKeyValue() variant with KeyValue #​4040
• Add xxxKeyValue() variants with KeyValue to ObservationContextAssert #​4038
• Add a timestamp to Event in Observation #​4032
• Dynatrace Registry: Export units and descriptions #​3979
• Provide a way to make decisions based on the parent in ObservationPredicate #​3678
• Add exemplar support to _count #​3996
• Configurable base time unit for OTLP registry #​3870
• Instrumentations for Apache HttpComponents do not meter errors and leak memory #​3800

📔 Documentation

• Deprecate Apache HttpComponents 4.x instrumentation #​3932

🐞 Bug Fixes

• [Dynatrace v2] Only serial

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge, however this is not possible so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[viezly]

Pull request by bot. No need to analyze

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher

🚮 Removed packages: maven/io.micrometer/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Critical CVE	maven/org.apache.tomee/[email protected]	CVE: GHSA-mp28-rq7g-qx62 Remote code execution in Apache TomEE (CRITICAL) Affected versions: >= 8.0.0, < 8.0.4 Patched version: 8.0.4	pom.xml	⚠︎

View full report↗︎

Next steps

What is a critical CVE?

Contains a Critical Common Vulnerability and Exposure (CVE).

Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore maven/org.apache.tomee/[email protected]