Bump the gradle group across 1 directory with 4 updates

[dependabot]

Bumps the gradle group with 4 updates in the / directory: org.flywaydb:flyway-database-postgresql, com.google.code.gson:gson, io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations and com.fasterxml.jackson:jackson-bom.

Updates org.flywaydb:flyway-database-postgresql from 11.1.1 to 11.3.1

Updates com.google.code.gson:gson from 2.11.0 to 2.12.1

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.11.1

The only difference between this release and 2.11.0 is that OSGi declarations in the Gson jar now specify that com.google.errorprone.annotations is an optional dependency, not a required one. If you do not use OSGi then there is no effective change.

Gson 2.12.0

What's Changed

The biggest change is that we no longer support Java 7. People who still need to run on Java 7 will need to use an earlier version of Gson.

Other changes:

• Allow registering adapters for JsonElement again by @​Marcono1234 in google/gson#2789
• Add nesting limit for JsonReader by @​Marcono1234 in google/gson#2588
• Add @CheckReturnValue to our packages. by @​cpovirk in google/gson#2693
• Add NullSafeTypeAdapter to prevent TypeAdapter.nullSafe() from returning nested null-safe type adapters (#2729) by @​lyubomyr-shaydariv in google/gson#2731
• Support Properties subclasses in GsonTypes.getMapKeyAndValueTypes by @​panic08 in google/gson#2758
• Enforce rawType to be a Class in ParameterizedTypeImpl by @​panic08 in google/gson#2759
• Remove AccessController usage for enum adapter by @​Marcono1234 in google/gson#2704
• Fix typeArguments array not being cloned when resolving ParameterizedType with changed owner by @​TBlueF in google/gson#2706
• Remove duplicated declaration of required OSGi execution environment by @​HannesWell in google/gson#2711
• Move bnd.bnd file configuration into 'bnd' element of bnd-maven-plugin by @​HannesWell in google/gson#2712
• Move enum and JsonElement adapter classes to separate class files by @​Marcono1234 in google/gson#2727
• EnumTypeAdapter constructor optimization by @​esaulpaugh in google/gson#2734
• OSGi / bnd: Remove the self-Import of gson.annotations by @​chrisrueger in google/gson#2735

New Contributors

• @​cpovirk made their first contribution in google/gson#2693
• @​jabagawee made their first contribution in google/gson#2701
• @​TBlueF made their first contribution in google/gson#2706
• @​HannesWell made their first contribution in google/gson#2711
• @​esaulpaugh made their first contribution in google/gson#2734
• @​chrisrueger made their first contribution in google/gson#2735
• @​panic08 made their first contribution in google/gson#2756

Full Changelog: google/gson@gson-parent-2.11.0...gson-parent-2.12.0

Commits

• 29e3d1d [maven-release-plugin] prepare release gson-parent-2.12.1
• be456cf Make the import of com.google.errorprone optional (#2795)
• b2e26fa Bump the github-actions group with 3 updates (#2785)
• 10bdd6d Simplify collection type adapters slightly. (#2791)
• ab9c54f [maven-release-plugin] prepare for next development iteration
• aaf7a12 [maven-release-plugin] prepare release gson-parent-2.12.0
• a2b1c3c Allow registering adapters for JsonElement again (#2789)
• e5dce84 Bump the maven group with 8 updates (#2784)
• 84e5f16 Bump the maven group with 7 updates (#2777)
• 9f3e577 Bump the github-actions group with 2 updates (#2778)
• Additional commits viewable in compare view

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations from 2.11.0 to 2.12.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's releases.

Version 2.12.0

This release targets the OpenTelemetry SDK 1.46.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

Migration notes

• Some Java agent instrumentation suppression keys have been renamed to match their module names: - elasticsearch-rest-6.0 --> elasticsearch-rest-6.4 - internal-application-logging --> internal-application-logger - javalin-5 -> javalin-5.0 - pulsar-2.8.0 -> pulsar-2.8
• In preparation for stabilizing HTTP library instrumentation soon: - setCaptured*Headers(List) methods in *TelemetryBuilder classes were changed to setCaptured*Headers(Collection) (#12901) - setKnownMethods(Set) methods in *TelemetryBuilder classes were changed to setKnownMethods(Collection) (#12902)

📈 Enhancements

• Support ExtendedTextMapGetter in gRPC instrumentation (#13011)
• Add database client metrics in DynamoDB instrumentation (#13033)
• Propagate context into async http client CompletableFuture callbacks (#13041)
• Exclude spring routing data source from Spring Starter instrumentation (#13054)
• Instrument jdbc batch queries (#12797)

🛠️ Bug fixes

• Fix incorrect dubbo trace caused by using rpcContext.isProviderSide() (#12930)
• Fix ClickHouse query failing with syntax error (#13020)
• Fix instrumentation module not loading silently when duplicate helper classnames are detected (#13005)
• Fix compatibility problem due to DubboHeadersGetter#keys in Dubbo 2.7.6 and 2.7.7 (#12982)
• Fix appender install for async Logback appenders (#13047)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​AlbumenJ @​annettejanewilson @​ataraxis @​cleverchuk @​FlorianBruckner @​jamesmoessis @​jaydeluca @​jeanbisutti @​johnbley @​JonasKunz @​laurit @​markAtAthena @​rghugikar @​shalk @​steverao @​SylvainJuge @​trask @​xiepuhuan @​zeitlinger

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's changelog.

Version 2.12.0 (2025-01-17)

Migration notes

• Some Java agent instrumentation suppression keys have been renamed to match their module names:
  • elasticsearch-rest-6.0 --> elasticsearch-rest-6.4
  • internal-application-logging --> internal-application-logger
  • javalin-5 -> javalin-5.0
  • pulsar-2.8.0 -> pulsar-2.8
• In preparation for stabilizing HTTP library instrumentation soon:
  • setCaptured*Headers(List) methods in *TelemetryBuilder classes were changed to setCaptured*Headers(Collection) (#12901)
  • setKnownMethods(Set) methods in *TelemetryBuilder classes were changed to setKnownMethods(Collection) (#12902)

📈 Enhancements

• Support ExtendedTextMapGetter in gRPC instrumentation (#13011)
• Add database client metrics in DynamoDB instrumentation (#13033)
• Propagate context into async http client CompletableFuture callbacks (#13041)
• Exclude spring routing data source from Spring Starter instrumentation (#13054)
• Instrument jdbc batch queries (#12797)

🛠️ Bug fixes

• Fix incorrect dubbo trace caused by using rpcContext.isProviderSide() (#12930)
• Fix ClickHouse query failing with syntax error (#13020)
• Fix instrumentation module not loading silently when duplicate helper classnames are detected (#13005)
• Fix compatibility problem due to DubboHeadersGetter#keys in Dubbo 2.7.6 and 2.7.7 (#12982)
• Fix appender install for async Logback appenders (#13047)

Commits

• 65f2b92 [release/v2.12.x] Prepare release 2.12.0 (#13056)
• 9fc83aa Update changelog for upcoming release (#13045)
• 467dfc0 Instrument jdbc batch queries (#12797)
• aaed8ac Spring starter: exclude spring routing data source from instrumentation (#13054)
• 93bca06 make rmi instrumentation indy-compatible + add module opener (#12585)
• 2da1d1f Logback: fix otel appender install for async appenders (#13047)
• ebdd5af fix(deps): update dependency org.snakeyaml:snakeyaml-engine to v2.9 (#13048)
• 93dd4c8 Propagate context into async http client CompletableFuture callbacks (#13041)
• 44bea8d add db client metrics for dynamo db (#13033)
• 4d2ea25 Rename another setSet... (#13046)
• Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.17.2 to 2.18.2

Commits

• 55ff098 [maven-release-plugin] prepare release jackson-bom-2.18.2
• 84a6fe4 Prep for 2.18.2 release
• 88591c6 Merge branch '2.17' into 2.18
• bc1206e Back to snapshot dep
• 1021173 [maven-release-plugin] prepare for next development iteration
• e3fd468 [maven-release-plugin] prepare release jackson-bom-2.17.3
• ef13a7a Start 2.17.3 release
• 1ed3d25 Back to snapshot deps
• fac9a3b [maven-release-plugin] prepare for next development iteration
• ef33ac7 [maven-release-plugin] prepare release jackson-bom-2.18.1
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
com.fasterxml.jackson:jackson-bom	[>= 2.18.0.a, < 2.18.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.