build(deps): bump the opentelemetry-deps-java group across 1 directory with 3 updates

[dependabot]

Bumps the opentelemetry-deps-java group with 3 updates in the /java directory: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha, io.opentelemetry.javaagent:opentelemetry-javaagent and io.opentelemetry.contrib:opentelemetry-aws-resources.

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.28.1-alpha to 2.29.0-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.28.1

This release targets the OpenTelemetry SDK 1.62.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

🛠️ Bug fixes

• Fix javaagent startup failures when declarative configuration uses bundled contrib components, such as the rule-based routing sampler. (#18813)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.29.0 (2026-06-19)

This release targets the OpenTelemetry SDK 1.63.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Change the return type for JmxTelemetry.start(...) APIs. (#18782)
• Experimental runtime package telemetry now emits package.checksum_algorithm=SHA-256 and 64-character package.checksum values instead of SHA1 checksums. (#18846)

🚫 Deprecations

• Rename the common logging context keys to otel.instrumentation.common.logging.trace-id-key, otel.instrumentation.common.logging.span-id-key, and otel.instrumentation.common.logging.trace-flags-key, while keeping the old property names deprecated. (#18851)
• Rename the kafka-broker and kafka-connect JMX target systems to experimental-kafka-broker and experimental-kafka-connect; the old names still work for now and log a warning. (#18971)

🌟 New javaagent instrumentation

• Add SOFARPC 5.4 instrumentation that emits RPC client and server spans and metrics. (#15589)
• Add Javaagent instrumentation for HBase client 2.0.0 through 2.5.0. (#18253)

📈 Enhancements

• Add opt-in support for emitting HTTP request exceptions as log signals with otel.semconv.exception.signal.preview=logs. (#16259)
• Add opentelemetry-api-1.63 Javaagent instrumentation for OpenTelemetry API 1.63 and opentelemetry-api-incubator 1.63. (#18911)
• Add otel.semconv-stability.v3-preview as a fallback for the declarative v3_preview semconv stability setting.

... (truncated)

Commits

• See full diff in compare view

Updates io.opentelemetry.javaagent:opentelemetry-javaagent from 2.28.1 to 2.29.0

Release notes

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's releases.

Version 2.29.0

This release targets the OpenTelemetry SDK 1.63.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Change the return type for JmxTelemetry.start(...) APIs. (#18782)
• Experimental runtime package telemetry now emits package.checksum_algorithm=SHA-256 and 64-character package.checksum values instead of SHA1 checksums. (#18846)

🚫 Deprecations

• Rename the common logging context keys to otel.instrumentation.common.logging.trace-id-key, otel.instrumentation.common.logging.span-id-key, and otel.instrumentation.common.logging.trace-flags-key, while keeping the old property names deprecated. (#18851)
• Rename the kafka-broker and kafka-connect JMX target systems to experimental-kafka-broker and experimental-kafka-connect; the old names still work for now and log a warning. (#18971)

🌟 New javaagent instrumentation

• Add SOFARPC 5.4 instrumentation that emits RPC client and server spans and metrics. (#15589)
• Add Javaagent instrumentation for HBase client 2.0.0 through 2.5.0. (#18253)

📈 Enhancements

• Add opt-in support for emitting HTTP request exceptions as log signals with otel.semconv.exception.signal.preview=logs. (#16259)
• Add opentelemetry-api-1.63 Javaagent instrumentation for OpenTelemetry API 1.63 and opentelemetry-api-incubator 1.63. (#18911)
• Add otel.semconv-stability.v3-preview as a fallback for the declarative v3_preview semconv stability setting. (#18936)
• Update the experimental stable database semantic-convention opt-in (otel.semconv-stability.opt-in=database) across database instrumentations, including span names and db.* attributes. (#18808, #18853, #18920, #18922, #18926, #18930, #18970, #18979, #18980, #18984, #18985, #18986, #18987, #18989, #18990, #18992, #18993, #19004, #19005)
• Capture query text and parameterization for Cassandra batch statements. (#18964)
• Keep opentelemetry-api and opentelemetry-instrumentation-annotations enabled under otel.instrumentation.common.v3-preview even when default-enabled=false. (#18792)
• When otel.instrumentation.common.v3-preview is enabled, affected instrumentations emit user.* identity attributes instead of enduser.* ones. (#18795)
• Disable Kafka client metrics by default when otel.instrumentation.common.v3-preview=true. (#18828)
• Recognize Amazon Aurora DSQL and AWS wrapper JDBC URL prefixes when parsing JDBC connection metadata. (#18831)
• Set instrumentation versions on emitted Meter scopes. (#18866)
• Run @WithSpan instrumentation after other instrumentations so other advice can attach attributes to the active span. (#18874)
• Emit database client failures as db.client.operation.exception logs when otel.semconv.exception.signal.preview is enabled. (#18889)
• Emit RPC exceptions as log records when otel.semconv.exception.signal.preview=logs is enabled. (#18890)
• Emit messaging exceptions as log records under otel.semconv.exception.signal.preview. (#18891)
• Emit faas.invocation.exception log records for FaaS exceptions when otel.semconv.exception.signal.preview=logs is enabled. (#18892)
• Emit gen_ai.client.operation.exception logs for OpenAI chat and embeddings failures when otel.semconv.exception.signal.preview=logs is enabled. (#18893)
• Emit AWS SDK request failures as rpc.client.call.exception log records when otel.semconv.exception.signal.preview=logs is enabled. (#18894)
• Declarative configuration now supports per-domain semantic-convention selection using semconv.version, semconv.experimental, and semconv.dual_emit settings. (#18908)
• When otel.instrumentation.common.v3-preview is enabled, use otel.semconv-stability.preview instead of otel.semconv-stability.opt-in to opt in to the nonstable service.peer and rpc semantic conventions. (#18914)
• Disable Kotlin coroutines @WithSpan instrumentation by default when otel.instrumentation.common.v3-preview=true. (#18919)
• Use the summary-aware path in SqlQueryAnalyzer.analyze() when otel.instrumentation.common.v3-preview is enabled. (#18921)
• When otel.instrumentation.common.v3-preview is enabled, deprecated JDBC/db sanitization config names are ignored in favor of db.query_sanitization.enabled. (#18934)
• Include jvm.gc.cause on GC duration metrics when otel.instrumentation.common.v3-preview is enabled. (#18967)
• Emit duration metrics for JDBC transaction operations COMMIT and ROLLBACK. (#19003)
• Use a generated InstrumentationVersion class in OkHttp 3.0 instead of reading embedded version properties, avoiding Android StrictMode disk-read violations. (#19006)
• Add thread details span attributes for declarative Spring starter configuration when distribution.spring_starter.thread_details_enabled is set. (#19008)

🛠️ Bug fixes

... (truncated)

Changelog

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's changelog.

Version 2.29.0 (2026-06-19)

This release targets the OpenTelemetry SDK 1.63.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Change the return type for JmxTelemetry.start(...) APIs. (#18782)
• Experimental runtime package telemetry now emits package.checksum_algorithm=SHA-256 and 64-character package.checksum values instead of SHA1 checksums. (#18846)

🚫 Deprecations

• Rename the common logging context keys to otel.instrumentation.common.logging.trace-id-key, otel.instrumentation.common.logging.span-id-key, and otel.instrumentation.common.logging.trace-flags-key, while keeping the old property names deprecated. (#18851)
• Rename the kafka-broker and kafka-connect JMX target systems to experimental-kafka-broker and experimental-kafka-connect; the old names still work for now and log a warning. (#18971)

🌟 New javaagent instrumentation

• Add SOFARPC 5.4 instrumentation that emits RPC client and server spans and metrics. (#15589)
• Add Javaagent instrumentation for HBase client 2.0.0 through 2.5.0. (#18253)

📈 Enhancements

• Add opt-in support for emitting HTTP request exceptions as log signals with otel.semconv.exception.signal.preview=logs. (#16259)
• Add opentelemetry-api-1.63 Javaagent instrumentation for OpenTelemetry API 1.63 and opentelemetry-api-incubator 1.63. (#18911)
• Add otel.semconv-stability.v3-preview as a fallback for the declarative v3_preview semconv stability setting. (#18936)
• Update the experimental stable database semantic-convention opt-in (otel.semconv-stability.opt-in=database) across database instrumentations, including span names and db.* attributes.

... (truncated)

Commits

• c215cb4 [release/v2.29.x] Prepare release 2.29.0 (#19042)
• 8e25e07 Draft release notes (#19040)
• 63de06b Update pinned latest dep versions (#19033)
• 5f25ddf fix(deps): update quarkus packages to v3.37.0 (#19031)
• 16c6d2a fix(deps): update armeria packages to v1.40.0 (#19032)
• a5ad922 fix(deps): update dependency commons-logging:commons-logging to v1.4.0 (#19030)
• 0fe64a2 Run openserch asyn callbacks with parent context (#19027)
• 23da760 Set request timeout only for the read timeout test (#19025)
• 7698f71 Set query timeouts for camel cassandara test (#19026)
• 6fd466c Add another port wait for hadoop test (#19028)
• Additional commits viewable in compare view

Updates io.opentelemetry.contrib:opentelemetry-aws-resources from 1.57.0-alpha to 1.58.0-alpha

Release notes

Sourced from io.opentelemetry.contrib:opentelemetry-aws-resources's releases.

Version 1.57.0

This release targets the OpenTelemetry Java Instrumentation 2.28.0.

Baggage processor

• Delegate baggage filtering to IncludeExcludePredicate and allow wildcards in auto-configuration (#2802)

Dynamic control

• Initialize pipeline configuration from declarative configuration or a fallback file (#2766)
• Add policy pipeline initialization manager (#2826)

IBM MQ metrics

• Add expired message metric for IBM MQ queues (#2809)

JFR events

• Add support for JFR contextual information (#2739)

OpAMP client

• Remove CompletableFuture usage (#2810)

Telemetry processors

• Deprecate EventToSpanEventBridge (#2822)

Span stack traces

• Ignore inferred spans in span stack traces by default (#2803)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​atoulme @​breedx-splk @​egahlin @​jack-berg @​jackshirazi @​jaydeluca @​JonasKunz @​laurit @​LikeTheSalad @​marschall @​MikeGoldsmith @​psx95 @​sfriberg @​SylvainJuge

... (truncated)

Changelog

Sourced from io.opentelemetry.contrib:opentelemetry-aws-resources's changelog.

Changelog

Unreleased

Version 1.58.0 (2026-06-19)

AWS X-Ray SDK support

• Prevent regex on hot path (#2879)

Azure resources

• Close leaky resources in azure-resources (#2876)
• Handle NumberFormatException when parsing numbers (#2880)

Disk buffering

• Add guard for non-numeric files (#2877)

Dynamic control

• Wire up first policy (#2833)
• Enable autoconfigurable extension (#2866)
• Register implementers (#2858)
• Add shadowJar target for fat jar including dependencies (#2869)
• Update README on instructions for using the project as an extension (#2885)

GCP authentication extension

• Support 'none' option in GOOGLE_OTEL_AUTH_TARGET_SIGNALS (#2899)

GCP resources

• Handle NumberFormatException when parsing numbers (#2880)

IBM MQ metrics

• Move to produce metrics via MetricProducer (#2836)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[thompson-tomo]

Let's merge #2396 & see if any gap exists afterwards.