chore(deps): update upper bound dependencies file by diegomarquezp · Pull Request #4052 · googleapis/sdk-platform-java
diegomarquezp added a commit that referenced this pull request
Jan 21, 2026
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [com.google.cloud:grpc-gcp](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/tree/master/grpc-gcp) ([source](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java)) | patch | `1.9.0` -> `1.9.1` | | [com.google.errorprone:error_prone_annotations](https://errorprone.info) ([source](https://togithub.com/google/error-prone)) | minor | `2.45.0` -> `2.46.0` | | [com.google.http-client:google-http-client](https://togithub.com/googleapis/google-http-java-client) | patch | `2.0.2` -> `2.0.3` | | [com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/) ([source](https://togithub.com/protocolbuffers/protobuf)) | patch | `4.33.1` -> `4.33.4` | | [commons-codec:commons-codec](https://commons.apache.org/proper/commons-codec/) ([source](https://togithub.com/apache/commons-codec)) | minor | `1.19.0` -> `1.20.0` | | [io.opentelemetry:opentelemetry-bom](https://togithub.com/open-telemetry/opentelemetry-java) | minor | `1.57.0` -> `1.58.0` | | [org.apache.httpcomponents.client5:httpclient5](https://hc.apache.org/) | minor | `5.5.1` -> `5.6` | | [org.apache.httpcomponents.core5:httpcore5](https://hc.apache.org/) | minor | `5.3.6` -> `5.4` | --- ### Release Notes <details> <summary>GoogleCloudPlatform/grpc-gcp-java (com.google.cloud:grpc-gcp)</summary> ### [`v1.9.1`](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/releases/tag/v1.9.1) [Compare Source](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/compare/v1.9.0...v1.9.1) #### What's Changed - fix: race for metrics values. Plus fix log metrics when reported via otel callbacks by [@​nimf](https://togithub.com/nimf) in [https://github.com/GoogleCloudPlatform/grpc-gcp-java/pull/228](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/pull/228) **Full Changelog**: GoogleCloudPlatform/grpc-gcp-java@v1.9.0...v1.9.1 </details> <details> <summary>google/error-prone (com.google.errorprone:error_prone_annotations)</summary> ### [`v2.46.0`](https://togithub.com/google/error-prone/releases/tag/v2.46.0): Error Prone 2.46.0 [Compare Source](https://togithub.com/google/error-prone/compare/v2.45.0...v2.46.0) Changes: - The javac flag `-XDaddTypeAnnotationsToSymbol=true` is now required for Error Prone invocations on JDK 21, to enable the javac fix for [JDK-8225377: type annotations are not visible to javac plugins across compilation boundaries](https://bugs.openjdk.org/browse/JDK-8225377). See [https://github.com/google/error-prone/issues/5426](https://togithub.com/google/error-prone/issues/5426) for details. - Remove deprecated `value` attribute from `@IncompatibleModifiers` and `@RequiredModifiers` ([https://github.com/google/error-prone/issues/2122](https://togithub.com/google/error-prone/issues/2122)) - Error Prone API changes to encapsulate references to internal javac APIs for end position handling (`EndPosTable`, `DiagnosticPosition`) (google/error-prone@5440bb4, google/error-prone@06c2905, google/error-prone@f3915ec) New checks: - [`DuplicateAssertion`](https://errorprone.info/bugpattern/DuplicateAssertion): detect duplicated assertion lines where the argument to `assertThat` is pure - [`IfChainToSwitch`](https://errorprone.info/bugpattern/IfChainToSwitch): suggest converting chains of if-statements into arrow switches - [`ScannerUseDelimiter`](https://errorprone.info/bugpattern/ScannerUseDelimiter): discourage `Scanner.useDelimiter("\\A")` - [`AddNullMarkedToClass`](https://errorprone.info/bugpattern/AddNullMarkedToClass): refactoring to add `@NullMarked` annotation to top level classes </details> <details> <summary>googleapis/google-http-java-client (com.google.http-client:google-http-client)</summary> ### [`v2.0.3`](https://togithub.com/googleapis/google-http-java-client/blob/HEAD/CHANGELOG.md#203-2025-12-19) [Compare Source](https://togithub.com/googleapis/google-http-java-client/compare/v2.0.2...v2.0.3) ##### Bug Fixes - **apache5:** Set connection request timeout on setTimeout ([#​2129](https://togithub.com/googleapis/google-http-java-client/issues/2129)) ([d11d794](https://togithub.com/googleapis/google-http-java-client/commit/d11d794d452a662bddd4402cd5d3895bcbe769f3)) </details> <details> <summary>apache/commons-codec (commons-codec:commons-codec)</summary> ### [`v1.20.0`](https://togithub.com/apache/commons-codec/blob/HEAD/RELEASE-NOTES.txt#Apache-Commons-Codec-1200-Release-Notes) The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.20.0. The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. This is a feature and maintenance release. Java 8 or later is required. </details> <details> <summary>open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-bom)</summary> ### [`v1.58.0`](https://togithub.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1580-2026-01-09) [Compare Source](https://togithub.com/open-telemetry/opentelemetry-java/compare/v1.57.0...v1.58.0) ##### API ##### Incubator - Delete GlobalConfigProvider in favor of access via ExtendedOpenTelemetry ([#​7914](https://togithub.com/open-telemetry/opentelemetry-java/pull/7914)) - Add DeclarativeConfigProperties#get method ([#​7923](https://togithub.com/open-telemetry/opentelemetry-java/pull/7923)) - Update ConfigProvider#getInstrumentationConfig response to be non-null ([#​7954](https://togithub.com/open-telemetry/opentelemetry-java/pull/7954)) - Add declarative config utility methods for common operations ([#​7927](https://togithub.com/open-telemetry/opentelemetry-java/pull/7927)) ##### SDK ##### Traces - Implement SDK metrics for trace ([#​7895](https://togithub.com/open-telemetry/opentelemetry-java/pull/7895), [#​7930](https://togithub.com/open-telemetry/opentelemetry-java/pull/7930)) - Emit warning when TraceIdRatioBasedSampler is used as child sampler ([#​7937](https://togithub.com/open-telemetry/opentelemetry-java/pull/7937)) ##### Logs - Implement SDK metrics for logs ([#​7931](https://togithub.com/open-telemetry/opentelemetry-java/pull/7931)) ##### Exporters - Prom exporter update ([#​7934](https://togithub.com/open-telemetry/opentelemetry-java/pull/7934)) ##### Extensions - Declarative config: update to opentelemetry-configuration 1.0.0-rc.3 ([#​7861](https://togithub.com/open-telemetry/opentelemetry-java/pull/7861)) - Declarative config: update jaeger remote sampler to require endpoint, initial_sampler ([#​7943](https://togithub.com/open-telemetry/opentelemetry-java/pull/7943)) - Declarative config: add support for view unit ([#​7942](https://togithub.com/open-telemetry/opentelemetry-java/pull/7942)) - Declarative config: add support for new logger config minimum_severity and trace_based properties ([#​7940](https://togithub.com/open-telemetry/opentelemetry-java/pull/7940)) - Declarative config: add support for composable parent threshold sampler ([#​7941](https://togithub.com/open-telemetry/opentelemetry-java/pull/7941)) - Declarative config: improve pattern for validating and loading SDK extension plugins ([#​7947](https://togithub.com/open-telemetry/opentelemetry-java/pull/7947)) ##### Project tooling - Use develocity build cache in PRs and local builds ([#​7906](https://togithub.com/open-telemetry/opentelemetry-java/pull/7906)) - Configure japicmp classpath to avoid false positives ([#​7945](https://togithub.com/open-telemetry/opentelemetry-java/pull/7945)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
lqiu96 pushed a commit that referenced this pull request
Feb 12, 2026
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [com.google.cloud:grpc-gcp](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/tree/master/grpc-gcp) ([source](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java)) | patch | `1.9.0` -> `1.9.1` | | [com.google.errorprone:error_prone_annotations](https://errorprone.info) ([source](https://togithub.com/google/error-prone)) | minor | `2.45.0` -> `2.46.0` | | [com.google.http-client:google-http-client](https://togithub.com/googleapis/google-http-java-client) | patch | `2.0.2` -> `2.0.3` | | [com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/) ([source](https://togithub.com/protocolbuffers/protobuf)) | patch | `4.33.1` -> `4.33.4` | | [commons-codec:commons-codec](https://commons.apache.org/proper/commons-codec/) ([source](https://togithub.com/apache/commons-codec)) | minor | `1.19.0` -> `1.20.0` | | [io.opentelemetry:opentelemetry-bom](https://togithub.com/open-telemetry/opentelemetry-java) | minor | `1.57.0` -> `1.58.0` | | [org.apache.httpcomponents.client5:httpclient5](https://hc.apache.org/) | minor | `5.5.1` -> `5.6` | | [org.apache.httpcomponents.core5:httpcore5](https://hc.apache.org/) | minor | `5.3.6` -> `5.4` | --- ### Release Notes <details> <summary>GoogleCloudPlatform/grpc-gcp-java (com.google.cloud:grpc-gcp)</summary> ### [`v1.9.1`](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/releases/tag/v1.9.1) [Compare Source](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/compare/v1.9.0...v1.9.1) #### What's Changed - fix: race for metrics values. Plus fix log metrics when reported via otel callbacks by [@​nimf](https://togithub.com/nimf) in [https://github.com/GoogleCloudPlatform/grpc-gcp-java/pull/228](https://togithub.com/GoogleCloudPlatform/grpc-gcp-java/pull/228) **Full Changelog**: GoogleCloudPlatform/grpc-gcp-java@v1.9.0...v1.9.1 </details> <details> <summary>google/error-prone (com.google.errorprone:error_prone_annotations)</summary> ### [`v2.46.0`](https://togithub.com/google/error-prone/releases/tag/v2.46.0): Error Prone 2.46.0 [Compare Source](https://togithub.com/google/error-prone/compare/v2.45.0...v2.46.0) Changes: - The javac flag `-XDaddTypeAnnotationsToSymbol=true` is now required for Error Prone invocations on JDK 21, to enable the javac fix for [JDK-8225377: type annotations are not visible to javac plugins across compilation boundaries](https://bugs.openjdk.org/browse/JDK-8225377). See [https://github.com/google/error-prone/issues/5426](https://togithub.com/google/error-prone/issues/5426) for details. - Remove deprecated `value` attribute from `@IncompatibleModifiers` and `@RequiredModifiers` ([https://github.com/google/error-prone/issues/2122](https://togithub.com/google/error-prone/issues/2122)) - Error Prone API changes to encapsulate references to internal javac APIs for end position handling (`EndPosTable`, `DiagnosticPosition`) (google/error-prone@5440bb4, google/error-prone@06c2905, google/error-prone@f3915ec) New checks: - [`DuplicateAssertion`](https://errorprone.info/bugpattern/DuplicateAssertion): detect duplicated assertion lines where the argument to `assertThat` is pure - [`IfChainToSwitch`](https://errorprone.info/bugpattern/IfChainToSwitch): suggest converting chains of if-statements into arrow switches - [`ScannerUseDelimiter`](https://errorprone.info/bugpattern/ScannerUseDelimiter): discourage `Scanner.useDelimiter("\\A")` - [`AddNullMarkedToClass`](https://errorprone.info/bugpattern/AddNullMarkedToClass): refactoring to add `@NullMarked` annotation to top level classes </details> <details> <summary>googleapis/google-http-java-client (com.google.http-client:google-http-client)</summary> ### [`v2.0.3`](https://togithub.com/googleapis/google-http-java-client/blob/HEAD/CHANGELOG.md#203-2025-12-19) [Compare Source](https://togithub.com/googleapis/google-http-java-client/compare/v2.0.2...v2.0.3) ##### Bug Fixes - **apache5:** Set connection request timeout on setTimeout ([#​2129](https://togithub.com/googleapis/google-http-java-client/issues/2129)) ([d11d794](https://togithub.com/googleapis/google-http-java-client/commit/d11d794d452a662bddd4402cd5d3895bcbe769f3)) </details> <details> <summary>apache/commons-codec (commons-codec:commons-codec)</summary> ### [`v1.20.0`](https://togithub.com/apache/commons-codec/blob/HEAD/RELEASE-NOTES.txt#Apache-Commons-Codec-1200-Release-Notes) The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.20.0. The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. This is a feature and maintenance release. Java 8 or later is required. </details> <details> <summary>open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-bom)</summary> ### [`v1.58.0`](https://togithub.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1580-2026-01-09) [Compare Source](https://togithub.com/open-telemetry/opentelemetry-java/compare/v1.57.0...v1.58.0) ##### API ##### Incubator - Delete GlobalConfigProvider in favor of access via ExtendedOpenTelemetry ([#​7914](https://togithub.com/open-telemetry/opentelemetry-java/pull/7914)) - Add DeclarativeConfigProperties#get method ([#​7923](https://togithub.com/open-telemetry/opentelemetry-java/pull/7923)) - Update ConfigProvider#getInstrumentationConfig response to be non-null ([#​7954](https://togithub.com/open-telemetry/opentelemetry-java/pull/7954)) - Add declarative config utility methods for common operations ([#​7927](https://togithub.com/open-telemetry/opentelemetry-java/pull/7927)) ##### SDK ##### Traces - Implement SDK metrics for trace ([#​7895](https://togithub.com/open-telemetry/opentelemetry-java/pull/7895), [#​7930](https://togithub.com/open-telemetry/opentelemetry-java/pull/7930)) - Emit warning when TraceIdRatioBasedSampler is used as child sampler ([#​7937](https://togithub.com/open-telemetry/opentelemetry-java/pull/7937)) ##### Logs - Implement SDK metrics for logs ([#​7931](https://togithub.com/open-telemetry/opentelemetry-java/pull/7931)) ##### Exporters - Prom exporter update ([#​7934](https://togithub.com/open-telemetry/opentelemetry-java/pull/7934)) ##### Extensions - Declarative config: update to opentelemetry-configuration 1.0.0-rc.3 ([#​7861](https://togithub.com/open-telemetry/opentelemetry-java/pull/7861)) - Declarative config: update jaeger remote sampler to require endpoint, initial_sampler ([#​7943](https://togithub.com/open-telemetry/opentelemetry-java/pull/7943)) - Declarative config: add support for view unit ([#​7942](https://togithub.com/open-telemetry/opentelemetry-java/pull/7942)) - Declarative config: add support for new logger config minimum_severity and trace_based properties ([#​7940](https://togithub.com/open-telemetry/opentelemetry-java/pull/7940)) - Declarative config: add support for composable parent threshold sampler ([#​7941](https://togithub.com/open-telemetry/opentelemetry-java/pull/7941)) - Declarative config: improve pattern for validating and loading SDK extension plugins ([#​7947](https://togithub.com/open-telemetry/opentelemetry-java/pull/7947)) ##### Project tooling - Use develocity build cache in PRs and local builds ([#​7906](https://togithub.com/open-telemetry/opentelemetry-java/pull/7906)) - Configure japicmp classpath to avoid false positives ([#​7945](https://togithub.com/open-telemetry/opentelemetry-java/pull/7945)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters