fix(deps): update all non-major application-server dependencies - #1169
fix(deps): update all non-major application-server dependencies#1169renovate[bot] wants to merge 1 commit into
Conversation
Not up to standards ⛔🟢 Issues
|
| Metric | Results |
|---|---|
| Coverage variation | ❌ -3.52% coverage variation (-1.00%) |
| Diff coverage | ✅ ∅ diff coverage |
Coverage variation details
Coverable lines Covered lines Coverage Common ancestor commit (40833fb) Report Missing Report Missing Report Missing Head commit (ecc2306) 6641 (-9267) 3335 (-5214) 50.22% (-3.52%) Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch:
<coverage of head commit> - <coverage of common ancestor commit>
Diff coverage details
Coverable lines Covered lines Diff coverage Pull request (#1169) 0 0 ∅ (not applicable) Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified:
<covered lines added or modified>/<coverable lines added or modified> * 100%
1 Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
|
🚨 OpenAPI Validation Failed 🚨 The OpenAPI specs in cd ./server
./gradlew :application-server:generateOpenApiDocsCommit and push the updated file. |
d5dc4dd to
ea411ce
Compare
c37de65 to
ce38158
Compare
e5e79fe to
e4f2255
Compare
4960517 to
e53df7f
Compare
71c2db2 to
d731586
Compare
d731586 to
ecc2306
Compare
This PR contains the following updates:
9.5.1-jdk21-alpine→9.7.0-jdk21-alpine1.1.1→1.2.08.44.1→8.53.05.4.0→5.5.05.4.0→5.5.02.25.3→2.26.20.2.10→0.2.113.0.3→3.1.012.9.0→12.11.07.23.0→7.24.012.9.0→12.11.042.7.11→42.7.13Release Notes
ls1intum/Helios (de.tum.cit.aet:helios-status-spring-starter)
v1.2.0What's Changed
Full Changelog: v1.1.0...v1.2.0
getsentry/sentry-java (io.sentry:sentry-spring-boot-4-starter)
v8.53.0Compare Source
Features
ISpan(#5929)ISpan.startChildoverloads withSpanOptionspublic (#5927)Sentry.feedback().enableOnShake(),Sentry.feedback().disableOnShake(), andSentry.feedback().isOnShakeEnabled()to toggle and query shake-to-report at runtime (#5827)Improvements
ApiStatus.Experimentalannotation fromSentrySQLiteDriver(#5938)Fixes
Scope.clear()(#5902)Throwableidentities when R8 optimizes Android apps (#5881)Performance
Process.getElapsedCpuTime()instead of parsing/proc/self/stat(33.6kB to 16 bytes per sample on a Pixel 3) (#5926)Dependencies
v8.52.0Compare Source
Fixes
ClientReportRecordernow reads the item count from the envelope item header instead of deserializing the payload, which under sustained rate limiting could pin CPU cores while repeatedly throwing exceptionsISentryExecutorServiceas cancelled (#5874)NoOpSentryExecutorServicepreviously returned aFuturethat was never run and never cancelled, so callers could not tell a dropped task from a queued one andget()would block until its timeoutPerformance
SentryFrameMetricsCollectorduringSentry.init(#5886)shutdownTimeoutMilliswhen closing the SDK with a pending transaction timeout or session-end task (#5851)RGB_565instead ofARGB_8888for screenshot and replay capture bitmaps, halving per-frame memory usage (#5821)SentryPerformanceProvider, which was allocated on every cold start inContentProvider.onCreatewithout ever being acquired (#5871)HostnameCacheworker thread now times out while idle instead of staying alive for the whole process lifetime (#5817)Dependencies
v8.51.0Compare Source
Features
ProfilingManager(Perfetto) for continuous profiling on API 35+ devices (#5251)ProfilingManagerwith Perfetto-based stack sampling, providing lower-overhead and more accurate profiles. No configuration change is required.Debug-based profiler.enableLegacyProfilingoption (defaulttrue) to disable the legacyDebug-based profiler. Setting it tofalsedisables continuous profiling on API < 35 devices as well as transaction-based profiling (profilesSampleRate/profilesSampler) on all devices, since transaction-based profiling is not supported by Perfetto.io.sentry.profiling.enable-legacy-profilingmanifest flag.Behavioral Changes
Sentry.init(#5792)SentryOptions.getOutboxPath()andSentryOptions.getCacheDirPath()are not guaranteed to exist onceSentry.initreturns.captureEnvelope— create the directory first, e.g.new File(outboxPath).mkdirs().Improvements
Fixes
checkCanRecordruns on the replay executor thread (#5837)MediaMuxerwhen the replay video encoder fails to start to avoid a resource leak (#5607)androidinstead ofjava) on ANR profile chunks so they are billed as UI Profile Hours rather than Continuous Profile Hours (#5836)ratelimit_backoffdiscarded events in client reports, so they no longer disappear from drop statistics. One event is recorded per buffer flush rather than per segment.Performance
mkdirs()calls off the init (main) thread (#5792)LifecycleWatchernow schedules the session-end task on the shared timer executor instead of creating a dedicatedjava.util.Timerthread (#5819)RateLimiternow schedules its rate-limit-lifted notifications on the shared timer executor instead of creating a dedicatedjava.util.Timerthread (#5814)Dependencies
v8.50.1Compare Source
Fixes
minCompileSdkto ourminSdk(21) instead of AGP 9's new default of the SDK's owncompileSdk(37), so apps that depend on the SDK aren't forced to raise theircompileSdk(#5823)v8.50.0Compare Source
Android 17 support
Fixes
Sentry.initby resolving the shake-detector accelerometer off the main thread (~1.75ms on a Pixel 10) (#5784)ApplicationExitInfoANR and native crash events captured before SDK initialization, without reusing options cached by a later app update (#5762)SentryTagModifierNode.isImportantForBoundsnow matches the default behavior and returnstrue(#5789)StackOverflowErrorwhen abeforeSend,beforeBreadcrumb,beforeSendLog, orbeforeEnvelopecallback triggers another capture (directly or through a logging integration such as Timber) (#5737)ThrowableProxywithLogEvent#getThrown()insentry-log4j2(#5751)Dependencies
v8.49.0Compare Source
Features
Session Replay: Record segment names (transaction names) (#5763)
Add
io.sentry:sentry-opentelemetry-bomto align Sentry OpenTelemetry modules with tested OpenTelemetry dependencies (#5629)dependencyManagement; explicit imports are applied after Spring Boot's implicit BOMdependencyManagement { imports { mavenBom("io.sentry:sentry-opentelemetry-bom:<sentry-version>") } }implementation(platform("io.sentry:sentry-opentelemetry-bom:<sentry-version>"))<dependencyManagement>block, or in the child POM when usingspring-boot-starter-parentFixes
buffermode (#5753)buffermode (#5754)tracePropagationTargetswhen injecting Sentry tracing headers through the OpenTelemetry OTLP propagator (#5656)Performance
Timerthread per transaction (#5670)Dependencies
which may downgrade the OpenTelemetry SDK, please have a look at the changelog entry above that explains how to use
sentry-opentelemetry-bom.v8.48.0Compare Source
Features
Add
Sentry.extendAppStart(),Sentry.finishExtendedAppStart(), andSentry.getExtendedAppStartSpan()to extend the app start measurement past the first frame for extra launch-time work on Android (#5604)options.isEnableStandaloneAppStartTracing). CallextendAppStart()inApplication.onCreateafter SDK init andfinishExtendedAppStart()when done:Add
trace_metric_bytedata category and record byte-level client reports when trace metrics are discarded (#5626)Expose sentry-native's heartbeat-based app-hang detection through
SentryAndroidOptions(#5623)setEnableNdkAppHangTracking(true)(disabled by default) and tune the timeout withsetNdkAppHangTimeoutIntervalMillis(...)(default5000ms), or theio.sentry.ndk.app-hang.enable/io.sentry.ndk.app-hang.timeout-interval-millismanifest entriessentry_app_hang_heartbeat()from the thread you want monitored. Independent of the JVM-based ANR detection (setAnrEnabled)Support the
io.sentry.tombstone.report-historicalmanifest option to enable historical tombstone reporting viaAndroidManifest.xml<meta-data>(#5683)Fixes
NoSuchMethodErrorfrom usingMath.floorDiv/Math.floorModoverloads that are unavailable on Java 8 (#5743)SentryDeviceInfoCacheso all threads spawned by the SDK are identifiable (#5684)Performance
Hintallocation inScope.addBreadcrumbwhen nobeforeBreadcrumbcallback is set (#5689)Thread.getName()name scan on every scope mutation (#5691)SentryExecutorServicequeued the prewarm work ahead of the first useful task, so it could only delay init work, never speed it up; the thread and class loading it warmed are paid identically by the first real task submitted right after.Dependencies
v8.47.0Compare Source
Behavioral Changes
SentryOkHttpInterceptor::interceptnow throwsIOException. This is a source-only and Java-only breaking change (#5654)Fixes
SentryGestureListeneralways started a UI transaction and only afterwards skipped binding it to the Scope when a manually-bound transaction already existed, leaving the new transaction to be dropped as an idle transaction without children.Scope.endSession()(#5657)ReplayIntegrationdue to persisting executor not being shut down (#5627)Modifier.sentryTag()or the Sentry Kotlin compiler plugin (#5672)Performance
getLocationOnScreenper view (#5595)SentryIdandSpanIdallocation overhead by replacing their per-instanceLazyEvaluator(and its lock) with a lightweight lazily-generatedString. (#5645)ReentrantLockbackingAutoClosableReentrantLockto avoid eager lock allocations for SDK objects that never contend duringSentryAndroid.init(#5643)v8.46.0Compare Source
Fixes
Behavioral Changes
getBreadcrumbs,getTags,getAttachments) are shared state and should not be mutated. (#5541)CombinedScopeView, we were returning a copy where mutations didn't show up in the underlying scopes.Dateobjects returned by SDK data model getters are shared state and should not be mutated. (#5603)Performance
Datecopies in SDK data model getters. (#5603)Breadcrumbdata map only when data is added. (#5598)JsonWriternesting stack size while preserving on-demand growth. (#5591)Calendarusage inDateUtilswith directDatecreation. (#5589)v8.45.0Compare Source
Features
app.starttransaction now reports why the OS started the process viaapp.vitals.start.reasontrace data (e.g.launcher,broadcast,service,content_provider), derived fromApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#5552)Fixes
System.nanoTime()for cron check-in duration measurement to avoid incorrect durations from wall-clock adjustments (#5611)getHistoricalProcessStartReasonsis called from an isolated or wrong-userId process (#5597)MediaMuxerwhen a replay segment has no encodable frames to avoid a resource leak (#5583)Dependencies
lysine-dev/okhttp (com.squareup.okhttp3:logging-interceptor)
v5.5.02026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use
DnsOverHttps:You could also opt in with our new
AndroidDnsAPI. Unfortunately, the privacy benefits of ECH aredeficient because its DNS queries are not encrypted by default.
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
@StartStopannotation now supports@NestedJUnit 5 tests.weren’t applied correctly.
the HTTP call to crash.
nats-io/nats.java (io.nats:jnats)
v2.26.2Compare Source
Core
JetStream
Miscellaneous
v2.26.1Compare Source
Core
JetStream
Miscellaneous
v2.26.0Compare Source
Core
JetStream
Misc
New Nats Docs
OpenAPITools/jackson-databind-nullable (org.openapitools:jackson-databind-nullable)
v0.2.11: releasedWhat's Changed
New Contributors
Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.10...v0.2.11
springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)
v3.1.0Added
nullablefor Kotlin propertiesChanged
Fixed
swagger-configSNAKE_CASE: some Java record fields remain camelCaseWebPropertiesandWebMvcPropertiesoptional inSwaggerConfigConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.