build(deps): bump the java-other group across 1 directory with 5 updates

[dependabot]

Bumps the java-other group with 5 updates in the /java directory:

Package	From	To
com.diffplug.spotless	7.0.4	7.1.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha	2.17.0-alpha	2.17.1-alpha
software.amazon.awssdk:bom	2.31.75	2.31.78
com.squareup.okhttp3:okhttp	4.12.0	5.1.0
io.opentelemetry.javaagent:opentelemetry-javaagent	2.17.0	2.17.1

Updates com.diffplug.spotless from 7.0.4 to 7.1.0

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha from 2.17.0-alpha to 2.17.1-alpha

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's releases.

Version 2.17.0

This release targets the OpenTelemetry SDK 1.51.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

Migration notes

• Changes have been made to Tomcat metric definitions provided by JMX Metric Insight component
  • metric http.server.tomcat.errorCount --> tomcat.error.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.requestCount --> tomcat.request.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.maxTime --> tomcat.request.duration.max
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.processingTime --> tomcat.request.duration.sum
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.traffic --> tomcat.network.io
    • attribute: name --> tomcat.request.processor.name, direction --> network.io.direction
  • metric http.server.tomcat.sessions.activeSessions --> tomcat.session.active.count
    • attribute: context --> tomcat.context
  • metric http.server.tomcat.threads split into two metrics: tomcat.thread.count and tomcat.thread.busy.count
    • attribute: name --> tomcat.thread.pool.name, state removed

📈 Enhancements

• JMX metrics: require explicit unit in yaml (#13796)
• Remove deprecated methods from runtime-telemetry (#13885)
• ClickHouse JDBC URL support (#13884)
• Support Vert.x HTTP client version 5.0 (#13903)
• Add metric jvm.file_descriptor.count to jvm runtime experimental metrics (#13904)
• Add support for Vert.x SQL client version 5.0 (#13914)
• JMX Metric Insights - improved Tomcat metrics alignment to semconv and added new Tomcat metrics tomcat.session.active.limit and tomcat.thread.limit (#13650)
• Apply method instrumentation only to methods (#13949)
• Apply external annotation instrumentation only to methods (#13948)
• Log start of spring boot starter (#13882)
• Update the OpenTelemetry SDK version to 1.51.0 (#13992)
• Capture finatra code function name (#13939)
• AWS SDK v2 Secrets Manager auto-instrumentation support (#14001)
• AWS SDK v1 Step Functions auto-instrumentation support (#14003)
• Add auto-instrumentation support for AWS Step Functions SDK v2 (#14028)
• Skip propagating context into mysql jdbc cleanup thread (#14060)

🛠️ Bug fixes

• Fix instrumentation failure when constructor has @​WithSpan annotation (#13929)
• Fix structured concurrency support on jdk 25 (#13936)

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha's changelog.

Changelog

Unreleased

Version 2.17.0 (2025-06-20)

Migration notes

• Changes have been made to Tomcat metric definitions provided by JMX Metric Insight component
  • metric http.server.tomcat.errorCount --> tomcat.error.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.requestCount --> tomcat.request.count
    • attribute: name --> tomcat.request.processor.name
    • type: Gauge --> Counter
  • metric http.server.tomcat.maxTime --> tomcat.request.duration.max
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.processingTime --> tomcat.request.duration.sum
    • attribute: name --> tomcat.request.processor.name
    • unit: ms --> s
  • metric http.server.tomcat.traffic --> tomcat.network.io
    • attribute: name --> tomcat.request.processor.name, direction --> network.io.direction
  • metric http.server.tomcat.sessions.activeSessions --> tomcat.session.active.count
    • attribute: context --> tomcat.context
  • metric http.server.tomcat.threads split into two metrics: tomcat.thread.count and tomcat.thread.busy.count
    • attribute: name --> tomcat.thread.pool.name, state removed

📈 Enhancements

• JMX metrics: require explicit unit in yaml (#13796)
• Remove deprecated methods from runtime-telemetry (#13885)
• ClickHouse JDBC URL support (#13884)
• Support Vert.x HTTP client version 5.0 (#13903)
• Add metric jvm.file_descriptor.count to jvm runtime experimental metrics (#13904)
• Add support for Vert.x SQL client version 5.0 (#13914)
• JMX Metric Insights - improved Tomcat metrics alignment to semconv and added new Tomcat metrics tomcat.session.active.limit and tomcat.thread.limit (#13650)
• Apply method instrumentation only to methods (#13949)
• Apply external annotation instrumentation only to methods (#13948)
• Log start of spring boot starter

... (truncated)

Commits

• See full diff in compare view

Updates software.amazon.awssdk:bom from 2.31.75 to 2.31.78

Updates com.squareup.okhttp3:okhttp from 4.12.0 to 5.1.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.1.0

2025-07-07

• New: Response.peekTrailers(). When we changed Response.trailers() to block instead of throwing in 5.0.0, we inadvertently removed the ability for callers to peek the trailers (by catching the IllegalStateException if they weren't available). This new API restores that capability.

• Fix: Don't crash on trailers() if the response doesn't have a body. We broke [Retrofit] users who read the trailers on the raw() OkHttp response, after its body was decoded.

Version 5.0.0

2025-07-02

This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading from OkHttp 4.x:

OkHttp is now packaged as separate JVM and Android artifacts. This allows us to offer platform-specific features and optimizations. If your build system handles [Gradle module metadata], this change should be automatic.

MockWebServer has a new coordinate and package name. We didn’t like that our old artifact depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We intend to continue publishing the old okhttp3.mockwebserver artifact so there’s no urgency to migrate.)

Coordinate	Package Name	Description
com.squareup.okhttp3:mockwebserver3:5.0.0	mockwebserver3	Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0	mockwebserver3.junit4	Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0	mockwebserver3.junit5	Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0	okhttp3.mockwebserver	Obsolete. Depends on JUnit 4.

OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks. It attempts both IPv6 and IPv4 connections concurrently, keeping whichever connects first.

We’ve improved our Kotlin APIs. You can skip the builder:

val request = Request(
  url = "https://cash.app/".toHttpUrl(),
)

OkHttp now supports [GraalVM].

Here’s what has changed since 5.0.0-alpha.17:

... (truncated)

Commits

• d2dd180 Prepare for release 5.1.0.
• 61a8735 New Response.peekTrailers() API (#8921)
• 6684401 Update dependency gradle to v8.14.3 (#8915)
• 7adb2b6 Update junit-framework monorepo (#8914)
• e41ff18 Link to new mockwebserver artifacts (#8911)
• 0ff8751 Remove Graal init tracing (#8909)
• b9a2560 Run graal on master (#8907)
• 8339524 Remove ExperimentalOkHttpApi references (#8908)
• ce29ef6 Fix graal tests (#8906)
• 8579689 Don't force a response body read on all trailers (#8904)
• Additional commits viewable in compare view

Updates io.opentelemetry.javaagent:opentelemetry-javaagent from 2.17.0 to 2.17.1

Release notes

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's releases.

Version 2.17.1

This is a patch release on the previous 2.17.0 release, fixing the issue(s) below.

• Backport: Fix invalid jmx state metrics empty unit (#14195)

Changelog

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's changelog.

Version 2.17.1 (2025-07-08)

• Backport: Fix invalid jmx state metrics empty unit (#14195)

Commits

• 1fc95c4 [release/v2.17.x] Fix uploading the release bundle (#14213)
• 9bb89d6 [release/v2.17.x] Rework how we release to central (#14146) (#14204)
• ace70b0 Fix muzzle in release/v2.17.x (#14205)
• d8e5304 [release/v2.17.x] Update change log for upcoming 2.17.1 release (#14201)
• 4bc1b76 [release/v2.17.x] fix invalid jmx state metrics empty unit (#14195)
• 3c24356 [release/v2.17.x] Prepare release 2.17.1 (#14103)
• 8b23dc7 [release/v2.17.x] Change log for upcoming 2.17.1 release (#14102)
• d9fc7ab [release/v2.17.x] Don't auto-release to maven central (#14101)
• 357a37b [release/v2.17.x] Revert "Use faster machine for release" (#14092)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions