Bump the minor group with 7 updates #4616

dependabot · 2025-02-03T15:32:48Z

Bumps the minor group with 7 updates:

Package	From	To
com.microsoft.azure:applicationinsights-agent	`3.6.2`	`3.7.0`
software.amazon.awssdk:aws-query-protocol	`2.30.6`	`2.30.11`
software.amazon.awssdk:sts	`2.30.6`	`2.30.11`
com.microsoft.azure:applicationinsights-web	`3.6.2`	`3.7.0`
com.microsoft.graph:microsoft-graph	`6.26.0`	`6.27.0`
io.sentry:sentry-spring-boot-starter-jakarta	`8.0.0`	`8.1.0`
org.wiremock:wiremock-standalone	`3.10.0`	`3.11.0`

Updates com.microsoft.azure:applicationinsights-agent from 3.6.2 to 3.7.0

Release notes

Sourced from com.microsoft.azure:applicationinsights-agent's releases.

Application Insights Java 3.7.0 (GA)

Enhancements

Support for Live Metrics Filtering (#43040, #43184, #43289, #43323, #43506, #43744)

Update to OpenTelemetry Java Instrumentation 2.12.0 (#4034)

Remove user sensitive data from self-diagnostics (#3976)

Exclude META-INF/maven/** from agent jar to avoid CVE false positives (#4040)

Don't log Log Records (when debug logging enabled) if they are sampled out (#3936)

Include NICE, IRQ, SOFTIRQ, and STEAL in \\Processor(_Total)\\% Processor Time metric (#3987)

Add note to applicationinsights.log to make sure that private information is removed from the log (#4011)

Support finding applicationinsights.json in current dir when using runtime attach (#3990)

Add a warning message if the applicationinsights-agent jar is in the classpath in Java 11+ (#4039)

Changelog

Sourced from com.microsoft.azure:applicationinsights-agent's changelog.

Version 3.7.0 GA (01/22/2025)

Enhancements

Support for Live Metrics Filtering (#43040, #43184, #43289, #43323, #43506, #43744)

Update to OpenTelemetry Java Instrumentation 2.12.0 (#4034)

Remove user sensitive data from self-diagnostics (#3976)

Exclude META-INF/maven/** from agent jar to avoid CVE false positives (#4040)

Don't log Log Records (when debug logging enabled) if they are sampled out (#3936)

Include NICE, IRQ, SOFTIRQ, and STEAL in \\Processor(_Total)\\% Processor Time metric (#3987)

Add note to applicationinsights.log to make sure that private information is removed from the log (#4011)

Support finding applicationinsights.json in current dir when using runtime attach (#3990)

Add a warning message if the applicationinsights-agent jar is in the classpath in Java 11+ (#4039)

Commits

fc09cc5 Bump com.github.ben-manes.versions from 0.51.0 to 0.52.0 (#4044)
ea752e4 Bump com.github.spotbugs.snom:spotbugs-gradle-plugin from 6.1.2 to 6.1.3 (#4046)
9080324 Bump version to 3.7.0 (#4042)
7a207f2 Update changelog for 3.7.0 release (#4041)
a874c5e Exclude META-INF/maven from shaded libraries (#4040)
42b6730 Java agent class path warning printed from Java 11 (#4039)
94ce828 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#4036)
c79a6c1 Bump org.owasp:dependency-check-gradle from 12.0.0 to 12.0.1 (#4035)
a99e37b Update to autoconfigure module (#4037)
4b8c4fb Bump com.github.spotbugs:spotbugs-annotations from 4.8.6 to 4.9.0 (#4028)
Additional commits viewable in compare view

Updates software.amazon.awssdk:aws-query-protocol from 2.30.6 to 2.30.11

Updates software.amazon.awssdk:sts from 2.30.6 to 2.30.11

Updates com.microsoft.azure:applicationinsights-web from 3.6.2 to 3.7.0

Release notes

Sourced from com.microsoft.azure:applicationinsights-web's releases.

Application Insights Java 3.7.0 (GA)

Enhancements

Support for Live Metrics Filtering (#43040, #43184, #43289, #43323, #43506, #43744)

Update to OpenTelemetry Java Instrumentation 2.12.0 (#4034)

Remove user sensitive data from self-diagnostics (#3976)

Exclude META-INF/maven/** from agent jar to avoid CVE false positives (#4040)

Don't log Log Records (when debug logging enabled) if they are sampled out (#3936)

Include NICE, IRQ, SOFTIRQ, and STEAL in \\Processor(_Total)\\% Processor Time metric (#3987)

Add note to applicationinsights.log to make sure that private information is removed from the log (#4011)

Support finding applicationinsights.json in current dir when using runtime attach (#3990)

Add a warning message if the applicationinsights-agent jar is in the classpath in Java 11+ (#4039)

Changelog

Sourced from com.microsoft.azure:applicationinsights-web's changelog.

Version 3.7.0 GA (01/22/2025)

Enhancements

Support for Live Metrics Filtering (#43040, #43184, #43289, #43323, #43506, #43744)

Update to OpenTelemetry Java Instrumentation 2.12.0 (#4034)

Remove user sensitive data from self-diagnostics (#3976)

Exclude META-INF/maven/** from agent jar to avoid CVE false positives (#4040)

Don't log Log Records (when debug logging enabled) if they are sampled out (#3936)

Include NICE, IRQ, SOFTIRQ, and STEAL in \\Processor(_Total)\\% Processor Time metric (#3987)

Add note to applicationinsights.log to make sure that private information is removed from the log (#4011)

Support finding applicationinsights.json in current dir when using runtime attach (#3990)

Add a warning message if the applicationinsights-agent jar is in the classpath in Java 11+ (#4039)

Commits

fc09cc5 Bump com.github.ben-manes.versions from 0.51.0 to 0.52.0 (#4044)
ea752e4 Bump com.github.spotbugs.snom:spotbugs-gradle-plugin from 6.1.2 to 6.1.3 (#4046)
9080324 Bump version to 3.7.0 (#4042)
7a207f2 Update changelog for 3.7.0 release (#4041)
a874c5e Exclude META-INF/maven from shaded libraries (#4040)
42b6730 Java agent class path warning printed from Java 11 (#4039)
94ce828 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#4036)
c79a6c1 Bump org.owasp:dependency-check-gradle from 12.0.0 to 12.0.1 (#4035)
a99e37b Update to autoconfigure module (#4037)
4b8c4fb Bump com.github.spotbugs:spotbugs-annotations from 4.8.6 to 4.9.0 (#4028)
Additional commits viewable in compare view

Updates com.microsoft.graph:microsoft-graph from 6.26.0 to 6.27.0

Release notes

Sourced from com.microsoft.graph:microsoft-graph's releases.

v6.27.0

6.27.0 (2025-01-30)

Features

generation: update request builders and models (ef427df)

Changelog

Sourced from com.microsoft.graph:microsoft-graph's changelog.

6.27.0 (2025-01-30)

Features

generation: update request builders and models (ef427df)

Commits

3e69b96 Merge pull request #2287 from microsoftgraph/release-please--branches--main--...
ef8b077 chore(main): release 6.27.0
5e0319d Merge pull request #2283 from microsoftgraph/v1.0/pipelinebuild/178264
5079bb6 Merge branch 'main' into v1.0/pipelinebuild/178264
0666c50 Merge pull request #2286 from microsoftgraph/dependabot/maven/com.google.code...
86845dd chore(deps): bump com.google.code.gson:gson from 2.11.0 to 2.12.0
ef427df feat(generation): update request builders and models
906f389 Merge pull request #2282 from microsoftgraph/dependabot/github_actions/depend...
baa03a5 chore(deps): bump dependabot/fetch-metadata from 2.2.0 to 2.3.0
369b296 Merge pull request #2281 from microsoftgraph/dependabot/gradle/android/com.gr...
Additional commits viewable in compare view

Updates io.sentry:sentry-spring-boot-starter-jakarta from 8.0.0 to 8.1.0

Release notes

Sourced from io.sentry:sentry-spring-boot-starter-jakarta's releases.

8.1.0

Features

Add options.ignoredErrors to filter out errors that match a certain String or Regex (#4083)

The matching is attempted on event.message, event.formatted, and {event.throwable.class.name}: {event.throwable.message}

Can be set in sentry.properties, e.g. ignored-errors=Some error,Another .*

Can be set in environment variables, e.g. SENTRY_IGNORED_ERRORS=Some error,Another .*

For Spring Boot, it can be set in application.properties, e.g. sentry.ignored-errors=Some error,Another .*

Log OpenTelemetry related Sentry config (#4122)

Fixes

Avoid logging an error when a float is passed in the manifest (#4031)

Add request details to transactions created through OpenTelemetry (#4098)

We now add HTTP request method and URL where Sentry expects it to display it in Sentry UI

Remove java.lang.ClassNotFoundException debug logs when searching for OpenTelemetry marker classes (#4091)

There was up to three of these, one for io.sentry.opentelemetry.agent.AgentMarker, io.sentry.opentelemetry.agent.AgentlessMarker and io.sentry.opentelemetry.agent.AgentlessSpringMarker.

These were not indicators of something being wrong but rather the SDK looking at what is available at runtime to configure itself accordingly.

Do not instrument File I/O operations if tracing is disabled (#4051)

Do not instrument User Interaction multiple times (#4051)

Speed up view traversal to find touched target in UserInteractionIntegration (#4051)

Reduce IPC/Binder calls performed by the SDK (#4058)

Behavioural Changes

Reduce the number of broadcasts the SDK is subscribed for (#4052)

Drop TempSensorBreadcrumbsIntegration

Drop PhoneStateBreadcrumbsIntegration

Reduce number of broadcasts in SystemEventsBreadcrumbsIntegration

Current list of the broadcast events can be found here. If you'd like to subscribe for more events, consider overriding the SystemEventsBreadcrumbsIntegration as follows:
SentryAndroid.init(context) { options ->
    options.integrations.removeAll { it is SystemEventsBreadcrumbsIntegration }
    options.integrations.add(SystemEventsBreadcrumbsIntegration(context, SystemEventsBreadcrumbsIntegration.getDefaultActions() + listOf(/* your custom actions */)))
}
If you would like to keep some of the default broadcast events as breadcrumbs, consider opening a GitHub issue.

Set mechanism type to suppressed for suppressed exceptions (#4125)

This helps to distinguish an exceptions cause from any suppressed exceptions in the Sentry UI

Dependencies

Bump Spring Boot to 3.4.2 (#4081)

Bump Native SDK from v0.7.14 to v0.7.19 (#4076)

changelog

diff

Changelog

Sourced from io.sentry:sentry-spring-boot-starter-jakarta's changelog.

8.1.0

Features

Add options.ignoredErrors to filter out errors that match a certain String or Regex (#4083)

The matching is attempted on event.message, event.formatted, and {event.throwable.class.name}: {event.throwable.message}

Can be set in sentry.properties, e.g. ignored-errors=Some error,Another .*

Can be set in environment variables, e.g. SENTRY_IGNORED_ERRORS=Some error,Another .*

For Spring Boot, it can be set in application.properties, e.g. sentry.ignored-errors=Some error,Another .*

Log OpenTelemetry related Sentry config (#4122)

Fixes

Avoid logging an error when a float is passed in the manifest (#4031)

Add request details to transactions created through OpenTelemetry (#4098)

We now add HTTP request method and URL where Sentry expects it to display it in Sentry UI

Remove java.lang.ClassNotFoundException debug logs when searching for OpenTelemetry marker classes (#4091)

There was up to three of these, one for io.sentry.opentelemetry.agent.AgentMarker, io.sentry.opentelemetry.agent.AgentlessMarker and io.sentry.opentelemetry.agent.AgentlessSpringMarker.

These were not indicators of something being wrong but rather the SDK looking at what is available at runtime to configure itself accordingly.

Do not instrument File I/O operations if tracing is disabled (#4051)

Do not instrument User Interaction multiple times (#4051)

Speed up view traversal to find touched target in UserInteractionIntegration (#4051)

Reduce IPC/Binder calls performed by the SDK (#4058)

Behavioural Changes

Reduce the number of broadcasts the SDK is subscribed for (#4052)

Drop TempSensorBreadcrumbsIntegration

Drop PhoneStateBreadcrumbsIntegration

Reduce number of broadcasts in SystemEventsBreadcrumbsIntegration

Current list of the broadcast events can be found here. If you'd like to subscribe for more events, consider overriding the SystemEventsBreadcrumbsIntegration as follows:
SentryAndroid.init(context) { options ->
    options.integrations.removeAll { it is SystemEventsBreadcrumbsIntegration }
    options.integrations.add(SystemEventsBreadcrumbsIntegration(context, SystemEventsBreadcrumbsIntegration.getDefaultActions() + listOf(/* your custom actions */)))
}
If you would like to keep some of the default broadcast events as breadcrumbs, consider opening a GitHub issue.

Set mechanism type to suppressed for suppressed exceptions (#4125)

This helps to distinguish an exceptions cause from any suppressed exceptions in the Sentry UI

Dependencies

Bump Spring Boot to 3.4.2 (#4081)

Bump Native SDK from v0.7.14 to v0.7.19 (#4076)

changelog

diff

Commits

c322afe release: 8.1.0
2748875 Re-apply 7.x.x changes (#4124)
a9719c7 chore(deps): update Native SDK to v0.7.19 (#4076)
b68011a Log debug messages giving info about OpenTelemetry related config settings (#...
2fc1ed7 Set mechanism type to suppressed for suppressed exceptions (#4125)
880dc4f Add JavaDoc to `SentryOptions.ignoredTransactions,ignoredSpanOrigins,ignoredC...
1683fbb Bump Spring Boot to 3.4.2 (#4081)
29a4185 Add request details to transactions created through OpenTelemetry (#4098)
5c403ff Add options.ignoredErrors accepting String and Regex (#4083)
a136d5b Remove date range for LICENSE (#4096)
Additional commits viewable in compare view

Updates org.wiremock:wiremock-standalone from 3.10.0 to 3.11.0

Release notes

Sourced from org.wiremock:wiremock-standalone's releases.

3.11.0

🚀 New Features

Support filename capabilities for Multipart's part (#2888) @aatifansari

🐞 Bug fixes

Always use the system default TransformerFactory in FormatXmlHelper (#2918) @ianprime0509

Disable problematic protocol update for httpclient 5.4 (#2951) @sven-carstens

make EqualToXmlPattern namespace aware by default. (#2945) @RafeArnold

📦 Dependency updates

Bump jetty 12 version to 12.0.16 (#2947) @leeturner

Bump com.networknt:json-schema-validator from 1.5.4 to 1.5.5 (#2935) @dependabot

Bump com.diffplug.spotless from 7.0.1 to 7.0.2 (#2934) @dependabot

Bump org.mockito:mockito-core from 5.14.2 to 5.15.2 (#2924) @dependabot

Bump com.diffplug.spotless from 6.25.0 to 7.0.1 (#2930) @dependabot

Bump org.mockito:mockito-junit-jupiter from 5.14.2 to 5.15.2 (#2925) @dependabot

Bump org.scala-lang:scala-library from 2.13.15 to 2.13.16 (#2932) @dependabot

Bump versions.junitJupiter from 5.11.3 to 5.11.4 (#2916) @dependabot

Bump com.google.guava:guava from 33.3.1-jre to 33.4.0-jre (#2917) @dependabot

✍ Other changes

improve performance of EqualToXmlPattern. (#2944) @RafeArnold

Update after-pattern.yaml to fix typo (#2949) @ascopes

Fix serialization of nested AdvancedPathPattern where @JsonUnwrapped is used (#2919) @leeturner

Throw descriptive exception when no suitable HttpServerFactory extension was found (#2920) @andipabst

Commits

dd8e739 Fixed test broken by suppression of HTTPS upgrade by the Apache HTTP Client
a7d9ac8 Bumped minor version
bd17065 Merge pull request #2918 from ianprime0509/xml-default-instance
63a3a12 Update after-pattern.yaml to fix typo (#2949)
437e3ec Disable problematic protocol update for httpclient 5.4 (#2951)
c3f3319 Bump jetty 12 version to 12.0.16 (#2947)
9ccb1c8 improve performance of EqualToXmlPattern. (#2944)
f913265 Make EqualToXmlPattern namespace aware by default. (#2945)
6217b77 Merge pull request #2943 from Ashish-CodeJourney/master
afe7de8 Merge pull request #1 from Ashish-CodeJourney/Ashish-CodeJourney-patch-1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [com.microsoft.azure:applicationinsights-agent](https://github.com/Microsoft/ApplicationInsights-Java) | `3.6.2` | `3.7.0` | | software.amazon.awssdk:aws-query-protocol | `2.30.6` | `2.30.11` | | software.amazon.awssdk:sts | `2.30.6` | `2.30.11` | | [com.microsoft.azure:applicationinsights-web](https://github.com/Microsoft/ApplicationInsights-Java) | `3.6.2` | `3.7.0` | | [com.microsoft.graph:microsoft-graph](https://github.com/microsoftgraph/msgraph-sdk-java) | `6.26.0` | `6.27.0` | | [io.sentry:sentry-spring-boot-starter-jakarta](https://github.com/getsentry/sentry-java) | `8.0.0` | `8.1.0` | | [org.wiremock:wiremock-standalone](https://github.com/wiremock/wiremock) | `3.10.0` | `3.11.0` | Updates `com.microsoft.azure:applicationinsights-agent` from 3.6.2 to 3.7.0 - [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases) - [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md) - [Commits](microsoft/ApplicationInsights-Java@3.6.2...3.7.0) Updates `software.amazon.awssdk:aws-query-protocol` from 2.30.6 to 2.30.11 Updates `software.amazon.awssdk:sts` from 2.30.6 to 2.30.11 Updates `com.microsoft.azure:applicationinsights-web` from 3.6.2 to 3.7.0 - [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases) - [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md) - [Commits](microsoft/ApplicationInsights-Java@3.6.2...3.7.0) Updates `com.microsoft.graph:microsoft-graph` from 6.26.0 to 6.27.0 - [Release notes](https://github.com/microsoftgraph/msgraph-sdk-java/releases) - [Changelog](https://github.com/microsoftgraph/msgraph-sdk-java/blob/main/CHANGELOG.md) - [Commits](microsoftgraph/msgraph-sdk-java@v6.26.0...v6.27.0) Updates `io.sentry:sentry-spring-boot-starter-jakarta` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/getsentry/sentry-java/releases) - [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md) - [Commits](getsentry/sentry-java@8.0.0...8.1.0) Updates `org.wiremock:wiremock-standalone` from 3.10.0 to 3.11.0 - [Release notes](https://github.com/wiremock/wiremock/releases) - [Commits](wiremock/wiremock@3.10.0...3.11.0) --- updated-dependencies: - dependency-name: com.microsoft.azure:applicationinsights-agent dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: software.amazon.awssdk:aws-query-protocol dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: software.amazon.awssdk:sts dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: com.microsoft.azure:applicationinsights-web dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: com.microsoft.graph:microsoft-graph dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: io.sentry:sentry-spring-boot-starter-jakarta dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: org.wiremock:wiremock-standalone dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 3, 2025

probation-integration-bot bot enabled auto-merge (squash) February 3, 2025 15:33

probation-integration-bot bot approved these changes Feb 3, 2025

View reviewed changes

probation-integration-bot bot merged commit 1ffd820 into main Feb 3, 2025
57 checks passed

probation-integration-bot bot deleted the dependabot/gradle/minor-8c6d0195f0 branch February 3, 2025 15:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor group with 7 updates #4616

Bump the minor group with 7 updates #4616

dependabot bot commented on behalf of github Feb 3, 2025

Bump the minor group with 7 updates #4616

Bump the minor group with 7 updates #4616

Conversation

dependabot bot commented on behalf of github Feb 3, 2025

Application Insights Java 3.7.0 (GA)

Enhancements

Version 3.7.0 GA (01/22/2025)

Enhancements

Application Insights Java 3.7.0 (GA)

Enhancements

Version 3.7.0 GA (01/22/2025)

Enhancements

v6.27.0

6.27.0 (2025-01-30)

Features

6.27.0 (2025-01-30)

Features

8.1.0

Features

Fixes

Behavioural Changes

Dependencies

8.1.0

Features

Fixes

Behavioural Changes

Dependencies

3.11.0

🚀 New Features

🐞 Bug fixes

📦 Dependency updates

✍ Other changes