build(deps): bump the dependencies group with 13 updates

[dependabot]

Bumps the dependencies group with 13 updates:

Package	From	To
jakarta.json.bind:jakarta.json.bind-api	3.0.2	3.0.3
org.freemarker:freemarker	2.3.34	2.3.35
com.graphql-java:graphql-java	26.0	26.1
org.hibernate.orm:hibernate-core	7.4.5.Final	7.4.6.Final
org.hibernate.orm:hibernate-scan-jandex	7.4.5.Final	7.4.6.Final
org.conscrypt:conscrypt-openjdk-uber	2.6.2	2.6.3
io.undertow:undertow-core	2.4.2.Final	2.4.3.Final
com.diffplug.spotless:spotless-maven-plugin	3.10.0	3.10.1
jakarta.data:jakarta.data-api	1.0.1	1.0.2
io.github.classgraph:classgraph	4.8.193	4.8.194
software.amazon.awssdk:bom	2.54.1	2.54.6
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha	2.31.0-alpha	2.31.1-alpha
org.jsoup:jsoup	1.23.1	1.23.2

Updates jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to 3.0.3

Release notes

Sourced from jakarta.json.bind:jakarta.json.bind-api's releases.

3.0.3

What's Changed

• fix: #344 tck challenge SerializersCustomizationCDITest in 3.0 by @​KyleAure in jakartaee/jsonb-api#414
• challenge: skip test testCreatorDeserialization by @​KyleAure in jakartaee/jsonb-api#417
• Fix tests that make wrong assumptions about char encoding 3.0 by @​KyleAure in jakartaee/jsonb-api#419

Full Changelog: jakartaee/jsonb-api@3.0.2...3.0.3

Commits

• d2beb53 Prepare release jakarta.json.bind:jakarta.json.bind-parent:3.0.3
• ca865cd Merge pull request #419 from KyleAure/fix-char-encoding-test-failures-downstream
• 0278fe2 Apply suggestions from code review
• c5a80c3 Fix tests that make wrong assumptions about character encoding
• 3e455fd Merge pull request #417 from KyleAure/347-disable-testCreatorDeserialization
• 4ce3833 challenge: skip test testCreatorDeserialization
• 374cc54 Merge pull request #414 from KyleAure/344-SerializersCustomizationCDITest-dow...
• cf22cdc fix: #344 tck challenge SerializersCustomizationCDITest
• 6c8e882 Prepare next development cycle jakarta.json.bind:jakarta.json.bind-parent:3.0...
• See full diff in compare view

Updates org.freemarker:freemarker from 2.3.34 to 2.3.35

Updates com.graphql-java:graphql-java from 26.0 to 26.1

Release notes

Sourced from com.graphql-java:graphql-java's releases.

26.1

This is a bugfix release for 26.

It contains a couple of fixes and no breaking changes.

List of PRs

• #4452 Backport 26.1: Remove dependency annotations from shaded classes
• #4443 Backport to 26.1: Fix nullable bound on DataFetcherResult.newResult
• #4444 Backport to 26.1: Fix covariance checks for SDL type extensions
• #4448 Backport 26.1: Fix input cycle validation for non-null lists
• #4447 Backport 26.1: Allow empty unions to be completed by extensions
• #4449 Backport 26.1: Fix subscription alternative call context cleanup
• #4446 Backport 26.1: Fix schema rebuild after root type deletion
• #4457 Backport 26.1: Mark InstrumentationState callback params as @​Nullable
• #4451 Backport 26.1: Reject cyclical SDL directive definitions
• #4450 Backport 26.1: validate circular default values

Full Changelog: graphql-java/graphql-java@v26.0...v26.1

Commits

• 722262d Merge pull request #4450 from graphql-java/codex/backport-4253-to-26.x
• 40c578f Merge pull request #4451 from graphql-java/codex/backport-4385-to-26.x
• 915bf1e Simplify circular default value validation
• 9158901 Simplify directive cycle detection
• 7a7774d Merge pull request #4457 from graphql-java/codex/backport-4435-to-26.x
• 9be7527 Propagate nullable chained instrumentation state
• ac661d0 fix: mark InstrumentationState callback params as @​Nullable
• 2073c98 Merge pull request #4446 from graphql-java/codex/backport-4390-to-26.x
• d81252f Merge pull request #4449 from graphql-java/codex/backport-4384-to-26.x
• 8d6eaba Merge remote-tracking branch 'origin/26.x' into codex/backport-4390-to-26.x
• Additional commits viewable in compare view

Updates org.hibernate.orm:hibernate-core from 7.4.5.Final to 7.4.6.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.6

Hibernate ORM 7.4.6.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.6.Final.

You can find the full list of 7.4.6.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.6.Final (August 23, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40133

** Bug * HHH-20788 [Quarkus 3.20.5 / Hibernate ORM 6.6.40.Final] quarkus.otel.logs.enabled=true fails SessionFactory build for TABLE_PER_CLASS collections * HHH-20783 hibernate.transactions{result="failure"} metric can transiently go negative due to non-atomic counter reads, breaking the whole Prometheus scrape on Micrometer 1.14+ * HHH-20779 Envers: unwrap proxies in collection-change audit work units * HHH-20776 CriteriaBuilder.literal() mistypes an enum constant declared with a class body * HHH-20772 ARRAY_AGG column in Jakarta Data query method cannot be mapped to result type property * HHH-20743 hibernate-maven-plugin enhance goal computes wrong class names when fileSets directory differs from classesDirectory * HHH-20707 Missing import for inner interface type in CDI accessor metamodel methods * HHH-20696 Implicit name of list index columns not applied by MetadataBuilder * HHH-20661 HQL UNION fails when unioning java.util.Date from different attribute paths * HHH-20624 StackOverflowError when creating entity manager with attribute converter hierarchy with generic parameter * HHH-20515 Adjust default for SessionCheckMode on Session.findMultiple() * HHH-20472 Generated metamodel class missing List import * HHH-20452 @​OneToMany mapping silently dropped when orm.xml contributes a partial overlay (entity-listeners only) to an entity whose @​Id is inherited from a @​MappedSuperclass * HHH-20438 Basic-array body predicates fail with AssertionError from SqmMappingModelHelper.resolveSqmPath * HHH-20348 DataException / ClassCastException when aggregating primitive

** Task * HHH-20736 Tune the content of javadocs to reduce the size of files published to Maven Central * HHH-20710 Update to hibernate-models 1.1.2

Commits

• 43e2e9a [Jenkins release job] Preparing release 7.4.6.Final
• cd34e60 [Jenkins release job] changelog.txt updated by release build 7.4.6.Final
• 229571c HHH-20710 Add test for generic Map subtype resolution with JSON mapping
• de419ce HHH-20710 Update to hibernate-models 1.1.2
• 284a4be HHH-20788 Return null for TablePerSubclass and clarify informational nature o...
• f74ba58 Make testsuite fit for JDK 28 Valhalla preview
• 33465fe Add JDK 28 to the testing JDK list
• 5e398fd Skip some tests causing nightly failures on MySQL due to a bug
• cf53ffa HHH-20783 Add a dedicated failed-transactions counter to Statistics
• f4e0be3 HHH-20772 add @​Incubating to new Processor options
• Additional commits viewable in compare view

Updates org.hibernate.orm:hibernate-scan-jandex from 7.4.5.Final to 7.4.6.Final

Release notes

Sourced from org.hibernate.orm:hibernate-scan-jandex's releases.

Release 7.4.6

Hibernate ORM 7.4.6.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.6.Final.

You can find the full list of 7.4.6.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-scan-jandex's changelog.

Changes in 7.4.6.Final (August 23, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40133

** Bug * HHH-20788 [Quarkus 3.20.5 / Hibernate ORM 6.6.40.Final] quarkus.otel.logs.enabled=true fails SessionFactory build for TABLE_PER_CLASS collections * HHH-20783 hibernate.transactions{result="failure"} metric can transiently go negative due to non-atomic counter reads, breaking the whole Prometheus scrape on Micrometer 1.14+ * HHH-20779 Envers: unwrap proxies in collection-change audit work units * HHH-20776 CriteriaBuilder.literal() mistypes an enum constant declared with a class body * HHH-20772 ARRAY_AGG column in Jakarta Data query method cannot be mapped to result type property * HHH-20743 hibernate-maven-plugin enhance goal computes wrong class names when fileSets directory differs from classesDirectory * HHH-20707 Missing import for inner interface type in CDI accessor metamodel methods * HHH-20696 Implicit name of list index columns not applied by MetadataBuilder * HHH-20661 HQL UNION fails when unioning java.util.Date from different attribute paths * HHH-20624 StackOverflowError when creating entity manager with attribute converter hierarchy with generic parameter * HHH-20515 Adjust default for SessionCheckMode on Session.findMultiple() * HHH-20472 Generated metamodel class missing List import * HHH-20452 @​OneToMany mapping silently dropped when orm.xml contributes a partial overlay (entity-listeners only) to an entity whose @​Id is inherited from a @​MappedSuperclass * HHH-20438 Basic-array body predicates fail with AssertionError from SqmMappingModelHelper.resolveSqmPath * HHH-20348 DataException / ClassCastException when aggregating primitive

** Task * HHH-20736 Tune the content of javadocs to reduce the size of files published to Maven Central * HHH-20710 Update to hibernate-models 1.1.2

Commits

• 43e2e9a [Jenkins release job] Preparing release 7.4.6.Final
• cd34e60 [Jenkins release job] changelog.txt updated by release build 7.4.6.Final
• 229571c HHH-20710 Add test for generic Map subtype resolution with JSON mapping
• de419ce HHH-20710 Update to hibernate-models 1.1.2
• 284a4be HHH-20788 Return null for TablePerSubclass and clarify informational nature o...
• f74ba58 Make testsuite fit for JDK 28 Valhalla preview
• 33465fe Add JDK 28 to the testing JDK list
• 5e398fd Skip some tests causing nightly failures on MySQL due to a bug
• cf53ffa HHH-20783 Add a dedicated failed-transactions counter to Statistics
• f4e0be3 HHH-20772 add @​Incubating to new Processor options
• Additional commits viewable in compare view

Updates org.conscrypt:conscrypt-openjdk-uber from 2.6.2 to 2.6.3

Release notes

Sourced from org.conscrypt:conscrypt-openjdk-uber's releases.

v2.6.3

This release uses the same Conscrypt source code as release 2.6.2, but the maven binary was compiled with this boringssl version: https://boringssl.googlesource.com/boringssl/+/refs/tags/0.20260616.0

This should fix google/conscrypt#1530

Commits

• See full diff in compare view

Updates io.undertow:undertow-core from 2.4.2.Final to 2.4.3.Final

Commits

• b169ab4 Prepare 2.4.3.Final
• 7ea77ed Merge pull request #1984 from ropalka/2.4.x-2026-08-fixes
• 5b8463d [UNDERTOW-2791] Introduced support for AJP secrets.
• 5584765 [UNDERTOW-2781] Limit chunk size so it does not overlap state
• 4223cdf [UNDERTOW-2790] Introduced support for enforcing WebSocket limits
• 1209bf2 [UNDERTOW-2789] Since now on all bytes are counted, including chunk metadata.
• 8f686ec Next is 2.4.3
• See full diff in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.10.1

Fixed

• <prettier> and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)

Commits

• 4ea1c6c Published maven/3.10.1
• f2f2348 Published gradle/8.10.1
• 4bc8980 Published lib/4.10.1
• 6fedfd5 chore(deps): update plugin errorprone to v5.1.1 (#3035)
• 5e10f0b chore(deps): update plugin errorprone to v5.1.1
• 3aa82b5 fix: expand a directory passed to targetExclude into the files under it (#3032)
• 68bddde shortenFullyQualifiedTypes: skip FQNs whose simple name clashes with types de...
• 6f73ed3 fix(deps): update dependency org.codehaus.plexus:plexus-utils to v4.1.0 (#3030)
• bdeafe7 docs: changelog entry for the targetExclude directory fix
• 4187eb3 fix: expand a directory passed to targetExclude into the files under it
• Additional commits viewable in compare view

Updates jakarta.data:jakarta.data-api from 1.0.1 to 1.0.2

Release notes

Sourced from jakarta.data:jakarta.data-api's releases.

1.0.2

What's Changed

• fix: add osgi manifest to api jar [1.0.1] by @​KyleAure in jakartaee/data#1151
• Fix TCK issues for Service Release 1.0.2 by @​KyleAure in jakartaee/data#991
• dep: update org.eclipse.ee4j:project in parent pom by @​KyleAure in jakartaee/data#1537

Full Changelog: jakartaee/data@1.0.1...1.0.2

Changelog

Sourced from jakarta.data:jakarta.data-api's changelog.

= Changelog :toc: auto

All notable changes to this project will be documented in this file.

The format is based on https://keepachangelog.com/en/1.0.0/[Keep a Changelog] and this project adheres to https://semver.org/spec/v2.0.0.html[Semantic Versioning].

== [Unreleased]

Commits

• 94a5fa2 Prepare release jakarta.data:jakarta.data-parent:1.0.2
• 32145a3 build: upgrade asciidoctor dependencies
• 0c33321 Merge pull request #1537 from KyleAure/1533-parent-pom-update
• 7f6e44b dep: update org.eclipse.ee4j:project in parent pom
• 6488c14 Merge pull request #991 from KyleAure/tck-fixes
• e54651d Merge pull request #1151 from KyleAure/1117-osgi-manifest-backport
• 3d460fe fix: add osgi manifest to api jar
• 6f4afc3 Revert "fix: jakartaee/data#978"
• d3255c6 fix: jakartaee/data#978
• 3df467a fix: jakartaee/data#979
• Additional commits viewable in compare view

Updates io.github.classgraph:classgraph from 4.8.193 to 4.8.194

Release notes

Sourced from io.github.classgraph:classgraph's releases.

ClassGraph 4.8.194

ClassGraph 5.0.0 is coming shortly, and requires JDK 17 or newer. 4.8.194 is a bugfix release on the 4.x maintenance branch, and continues the file-by-file audit of the codebase that produced 4.8.190 through 4.8.193. As before, most of the bugs listed here were found by Claude through careful code analysis, and were fixed on the v5 branch and backported to v4.

The theme this time is the order in which scan sources are searched: which classloader's copy of a class wins, where the application classpath sits in that order, and how module layers are traversed. There is also a fix for a scan that never returns.

Bug fixes: deadlock

• A scan started from a thread holding a classloader lock never returned (#933). scan() and scan(int) submitted the Scanner to an ExecutorService and blocked the calling thread on the Future, so the first classes the scan needed were loaded on a worker thread. If the calling thread held a lock that the classloader also acquires — not unusual during a host's startup, as in Fabric/Knot — the worker blocked in ClassLoader.loadClass while the caller waited for it, and neither ever moved. Neither side of that cycle is a monitor that both threads contend for, so the JVM did not report it as a deadlock either, and jstack showed nothing wrong. The Scanner now runs on the calling thread; the ExecutorService is still used for the parallel stages of the scan, and is not used at all when numParallelTasks is 1, so scan(1) now loads every class it needs on the calling thread and cannot deadlock that way. scanAsync() is unchanged, since running on a pool thread is its purpose.

Bug fixes: classpath and classloader order

• A classloader could be ordered behind its own ancestors. The list of classloaders found in the environment was seeded with the thread context classloader, ClassGraph's own classloader and the system classloader before the call stack was read, so an ancestor could be placed ahead of the descendant that actually called ClassGraph. Only the position of the first classloader of a delegation chain to be reached is decided by that list — once a classloader is reached, its ClassLoaderHandler decides where its ancestors' classpath elements go relative to its own — so pinning an ancestor first silently converted parent-last delegation, the default for Tomcat's WebappClassLoader and for Spring Boot DevTools' RestartClassLoader, into parent-first delegation, inverting the class masking order. The classloaders found in the environment are now sorted by descending delegation depth, which cannot place an ancestor ahead of one of its descendants, and the call stack is read innermost frame first, so the immediate caller's classloader is preferred over that of the code that called it, mirroring how Class.forName(String) resolves against its immediate caller. Classloaders added with addClassLoader() are still appended after them, as that method documents.

• The application classpath was searched after the classloaders that delegate to it. The java.class.path entries were appended after every classloader had been visited, which inverts the masking order: a class present both on the application classpath and in a child classloader was reported from the child, whereas parent-first delegation makes the JVM load the application classloader's copy. Those entries are now contributed by the handler for the application classloader, so they land at the position the application classloader takes in the delegation order, like any other classloader's entries. This also makes ignoreParentClassLoaders() behave as its documentation says: it now leaves out only the entries that a parent classloader declares, instead of also dropping the application classloader's own entries when the application classloader is itself one of the classloaders being searched.

• A module layer reachable from more than one named layer was listed more than once, and the resulting order then depended on which layers the caller happened to name rather than on the layer DAG alone. Naming a parent layer and its child, in either order, gave the same result — the child first — so asking for the parent's modules to be searched first had no effect. The visited set is now shared across all top-level layers, so a layer named directly keeps the position its own name gives it, and is reached indirectly through ModuleLayer#parents() only if the caller did not name it. The javadoc now also states why a layer's own modules come before its parent layers': the classloader a layer creates is a jdk.internal.loader.Loader, whose loadClass checks this layer's own modules before the parent layers' and before its parent classloader — the reverse of the classloader axis, and observable, since a child layer may define a module with the same name as one in a parent layer and the child's copy then wins.

• Six ClassLoaderHandlers were missing classpath entries that their classloaders expose. An audit of the source of every supported classloader turned these up; nothing that was already read has been removed, since a field or method absent from the current source may still be present in an older version. Uno-JAR also accepts extra entries in the uno-jar.class.path system property, separated by |. A JBoss ResourceLoader that wraps another one, such as a FilteredResourceLoader, exposes only the location of the loader it delegates to. An Equinox BundleFileWrapper installed by a framework extension copies only the base file of the bundle file it wraps, so without following its bundleFile field the sub-path within the bundle is lost. A Felix Content with no file of its own delegates to the Content in its m_content field. The bundle file of an older Equinox classpath entry can be a nested directory or a wrapper chain, exactly as in newer versions, and the bundle's fragments have classpath entries of their own. A WebSphere Liberty AppClassLoader delegates to the classloaders of its configured libraries, split by precedence into beforeAppDelegateLoaders and afterAppDelegateLoaders, and a ThreadContextClassLoader searches the classloaders in followOnClassLoaders after its parent.

Bug fixes: resource paths

• A package root within a jarfile was separated from a resource path with !/ rather than /. A classpath entry can name a package root within a jarfile, e.g. app.jar!/BOOT-INF, and Resource#getURI() appended !/ between the URI of the classpath element and the path of the resource within it, giving app.jar!/BOOT-INF!/classes/hello/HelloController.class — a URL with two !/ separators but only one archive in it, which does not resolve. A package root is a directory within the jarfile, not a jarfile nested inside it, so a resource beneath it is separated from it by /. The default automatic package root prefixes masked this for the paths they cover.

Bug fixes: classfile parsing

• A class using the JVMS-specified encoding of a Class-valued annotation element vanished from scan results. JVMS 4.7.16.1 specifies that the class_info_index of a tag c annotation element value refers to a CONSTANT_Class entry, but javac writes the type descriptor directly as a CONSTANT_Utf8 entry instead, which is what AnnotationClassRef expects. With a classfile that follows the spec to the letter, the binary class name failed to parse as a descriptor and the whole class was silently dropped. CONSTANT_Class references are now converted to type descriptors, and UTF8 constants are passed through unchanged.

• Mixing RUNTIME- and CLASS-retention type-use annotations on one declaration dropped all the RUNTIME ones. javac emits both the RuntimeVisibleTypeAnnotations and RuntimeInvisibleTypeAnnotations attributes on the same target in that case, and the field, method and class attribute readers each overwrote the decorators of the first attribute with those of the second. The two lists are now merged.

• A constant declared by an implemented interface could not be found through an implementing class. The reflection driver's member cache walked the superclass chain caching declared methods and fields, then walked the interface graph caching only declared methods. Both kinds are now cached at both traversal sites, and methods and fields are read in separate try blocks, so a class whose fields cannot be read still has its methods cached, and vice versa.

Behaviour changes

• ClassInfo#toString() now names only the class in an extends or implements clause, as Java source does. It previously rendered a superclass or superinterface with its own modifiers, class type keyword and extends/implements clauses, producing output that is not a Java declaration:

  public static class Child extends public abstract static Parent extends java.lang.Exception implements public abstract static Marker implements public abstract static Tag
  

  The named class's modifiers, class type, type parameters, record parameters and supertypes all belong to its own declaration. This changes toString() output for any class whose supertypes have supertypes or modifiers of their own.

Dependencies and documentation

• Narcissus updated to 1.0.13, which adds a native library for Linux on arm64, so ClassGraph can read the classpath through Narcissus on that platform too.

• The README and the CIRCUMVENT_ENCAPSULATION javadoc listed the wrong set of platforms Narcissus supports: there have been no 32-bit x86 builds for a long time, and Linux arm64 and macOS arm64 were missing.

Commits

• 4ac0a76 [maven-release-plugin] prepare release classgraph-4.8.194
• 3b37a81 Run a blocking scan on the calling thread
• ff10ce4 Name only the class in an extends or implements clause
• fbe7127 Put the application classloader's classpath entries in their proper place
• 4e090c9 Order a classloader ahead of its own ancestors when finding scan sources
• ade5186 List each module layer once, in the order its own loader searches
• 68fceaa Separate a package root from a resource path with '/', not '!/'
• b07d80f Read the classpath entries that six ClassLoaderHandlers were missing
• 89bdb8a Handle the JVMS-specified encoding of 'c' annotation element values
• 1c2eee6 Merge runtime visible and invisible type annotation attributes
• Additional commits viewable in compare view

Updates org.hibernate.orm:hibernate-scan-jandex from 7.4.5.Final to 7.4.6.Final

Release notes

Sourced from org.hibernate.orm:hibernate-scan-jandex's releases.

Release 7.4.6

Hibernate ORM 7.4.6.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.6.Final.

You can find the full list of 7.4.6.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-scan-jandex's changelog.

Changes in 7.4.6.Final (August 23, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40133

** Bug * HHH-20788 [Quarkus 3.20.5 / Hibernate ORM 6.6.40.Final] quarkus.otel.logs.enabled=true fails SessionFactory build for TABLE_PER_CLASS collections * HHH-20783 hibernate.transactions{result="failure"} metric can transiently go negative due to non-atomic counter reads, breaking the whole Prometheus scrape on Micrometer 1.14+ * HHH-20779 Envers: unwrap proxies in collection-change audit work units * HHH-20776 CriteriaBuilder.literal() mistypes an enum constant declared with a class body * HHH-20772 ARRAY_AGG column in Jakarta Data query method cannot be mapped to result type property * HHH-20743 hibernate-maven-plugin enhance goal computes wrong class names when fileSets directory differs from classesDirectory * HHH-20707 Missing import for inner interface type in CDI accessor metamodel methods * HHH-20696 Implicit name of list index columns not applied by MetadataBuilder * HHH-20661 HQL UNION fails when unioning java.util.Date from different attribute paths * HHH-20624 StackOverflowError when creating entity manager with attribute converter hierarchy with generic parameter * HHH-20515 Adjust default for SessionCheckMode on Session.findMultiple() * HHH-20472 Generated metamodel class missing List import * HHH-20452 @​OneToMany mapping silently dropped when orm.xml contributes a partial overlay (entity-listeners only) to an entity whose @​Id is inherited from a @​MappedSuperclass * HHH-20438 Basic-array body predicates fail with AssertionError from SqmMappingModelHelper.resolveSqmPath * HHH-20348 DataException / ClassCastException when aggregating primitive

** Task * HHH-20736 Tune the content of javadocs to reduce the size of files published to Maven Central * HHH-20710 Update to hibernate-models 1.1.2

Commits

• 43e2e9a [Jenkins release job] Preparing release 7.4.6.Final
• cd34e60 [Jenkins release job] changelog.txt updated by release build 7.4.6.Final
• 229571c HHH-20710 Add test for generic Map subtype resolution with JSON mapping
• de419ce HHH-20710 Update to hibernate-models 1.1.2
• 284a4be HHH-20788 Return null for TablePerSubclass and clarify informational nature o...
• f74ba58 Make testsuite fit for JDK 28 Valhalla preview
• 33465fe Add JDK 28 to the testing JDK list
• 5e398fd Skip some tests causing nightly failures on MySQL due to a bug
• cf53ffa HHH-20783 Add a dedicated failed-transactions counter to Statistics
• f4e0be3 HHH-20772 add @​Incubating to new Processor options
• Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.54.1 to 2.54.6

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.31.0-alpha to 2.31.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.31.0

This release targets the OpenTelemetry SDK 1.65.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they will continue to have breaking changes. Please see VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Remove the deprecated ConfigPropertiesBackedConfigProvider and its create(ConfigProperties) compatibility API from the declarative config bridge. (#19305)
• Stop exposing opentelemetry-instrumentation-api-incubator on library instrumentation compile classpaths. (#19612)

🚫 Deprecations

• Deprecate otel.instrumentation.experimental.span-suppression-strategy in favor of Experimental.setSpanSuppressionStrategy(...). (#19180)
• Deprecate HostIdResource.REGISTRY_QUERY in favor of the absolute-path reg.exe lookup used by HostIdResource. (#19293)
• Deprecate MessageOperation in favor of MessagingOperationType, and the MessageOperation overloads of MessagingAttributesExtractor, MessagingConsumerMetrics, MessagingProducerMetrics, MessagingSpanKindExtractor, and MessagingSpanNameExtractor in favor of the corresponding MessagingOperationType APIs. (#19357)
• Deprecate otel.traces.exporter=zipkin in favor of otel.traces.exporter=otlp, and otel.exporter.zipkin.endpoint in favor of otel.exporter.otlp.traces.endpoint. (#19400)
• Deprecate OpenTelemetryMeterRegistryBuilder#setMicrometerHistogramGaugesEnabled(boolean) in favor of Experimental#setMicrometerHistogramGaugesEnabled(OpenTelemetryMeterRegistryBuilder, boolean). (#19404)
• Deprecate legacy gRPC metadata, messaging header, and servlet request-parameter capture properties and APIs in favor of selector-based .included / .excluded configuration and IncludeExclude APIs. (#19494, #19522, #19523, #19638)
• Deprecate otel.instrumentation.runtime-telemetry.experimental.prefer-jfr in favor of otel.instrumentation.runtime-telemetry.experimental.jfr-metrics.included, and setPreferJfrMetrics(...) in favor of setJfrMetrics(RuntimeTelemetryBuilder, IncludeExclude). (#19495)
• Deprecate boolean and capture-list configuration for MDC/context data, map messages, key-value pairs, logger context, Logstash markers, and structured arguments in favor of .included / .excluded selectors and IncludeExclude APIs. (#19519, #19520, #19521, #19599, #19600, #19605, #19609, #19610)
• Deprecate the declarative configuration field general.semconv_stability.opt_in in favor of general.stability_opt_in_list, and general.sanitization.url.sensitive_query_parameters/development in favor of general.sanitization.url.sensitive_query_parameters. (#19561)
• Deprecate otel.instrumentation.graphql.add-operation-name-to-span-name.enabled in favor of otel.instrumentation.graphql.operation-name-in-span-name.enabled, and otel.instrumentation.runtime-telemetry.package-emitter.enabled / jars-per-second in favor of otel.instrumentation.runtime-telemetry.experimental.package-emitter.enabled / jars-per-second. (#19573)
• Deprecate captured request and response header builder methods across HTTP library instrumentations in favor of selector-based requestHeaders(IncludeExclude) and responseHeaders(IncludeExclude) APIs. (#19598, #19601, #19602, #19603, #19604, #19606, #19607, #19608)
• Deprecate otel.instrumentation.micrometer.histogram-gauges.enabled in favor of otel.instrumentation.micrometer.experimental.histogram-gauges.enabled. (#19613)

🌟 New javaagent instrumentation

• Add Apache Commons Pool 2 instrumentation for object pool metrics. (#19091)
• Add Apache HBase client 1.0 javaagent instrumentation. (#19243)
• Add Redisson connection pool metrics for 3.26+. (#19392)
• Add support for OpenTelemetry API 1.65 incubator metrics in the Java agent. (#19456)
• Add Tomcat DBCP 8.0 javaagent instrumentation for database pool metrics. (#19472)

📈 Enhancements

• Add opt-in OSGi bundle metadata for selected instrumentation, API, and SDK extension artifacts so they can be consumed directly in OSGi runtimes. (#18995)
• Add cassandra.compaction.progress.completed and cassandra.compaction.progress.size gauges for in-flight Cassandra compactions. (#19290)
• Preview the upcoming 3.0 messaging semantic conventions behind otel.semconv-stability.opt-in=messaging across AWS SQS and Lambda, JMS, Kafka, NATS, Pulsar, RabbitMQ, RocketMQ, Spring Integration, and Spring messaging instrumentations. (#19347, #19348, #19349, #19350, #19351, #19353, #19354, #19355, #19356, #19476, #19477, #19478, #19479, #19480, #19481, #19482, #19486, #19487, #19499, #195...

  Description has been truncated