Update all patch and minor versions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.6.1 → 9.7.0
otel/opentelemetry-collector-contrib		minor	0.157.0 → 0.159.0
org.jctools:jctools-core (source)	dependencies	patch	4.0.6 → 4.0.7
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	patch	2.22.1 → 2.22.2
io.netty:netty-bom (source)	dependencies	patch	4.2.16.Final → 4.2.17.Final
checkstyle (source)	dependencies	minor	13.9.0 → 13.11.0
com.google.guava:guava-bom	dependencies	minor	33.6.0-jre → 33.7.1-jre
biz.aQute.bnd:biz.aQute.bnd.gradle (source)	dependencies	minor	7.3.0 → 7.4.0
com.fasterxml.jackson:jackson-bom	dependencies	patch	2.22.1 → 2.22.2
com.squareup.okhttp3:okhttp (source)	dependencies	minor	5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp-bom (source)	dependencies	minor	5.4.0 → 5.5.0
com.linecorp.armeria:armeria-junit5 (source)	dependencies	minor	1.40.0 → 1.41.0
com.linecorp.armeria:armeria-grpc-protocol (source)	dependencies	minor	1.40.0 → 1.41.0
com.linecorp.armeria:armeria-grpc (source)	dependencies	minor	1.40.0 → 1.41.0
com.linecorp.armeria:armeria (source)	dependencies	minor	1.40.0 → 1.41.0
org.graalvm.buildtools.native	plugin	patch	1.1.7 → 1.1.9

---

Release Notes

gradle/gradle (gradle)

v9.7.0

Compare Source

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)

v0.159.0

Compare Source

🛑 Breaking changes 🛑

• contrib: Remove deprecated kafkatopicsobserver extension from the contrib distribution (#​1597)

🚀 New components 🚀

• extension/aws_iam_db_auth: Add aws_iam_db_auth to the contrib distribution (#​1591)

v0.158.0

Compare Source

🛑 Breaking changes 🛑

• all: Update Cosign usage to work with v3 (#​1570)
  The Cosign v3 upgrade introduced a change in signing workflow. Previous two files
  were required to map the outputs (certificate and signature), now only one file is required.
  The new file is a bundle that contains both outputs in JSON format.
  This change has been done following the guidance from https://goreleaser.com/blog/cosign-v3/.
  With this change, anyone who wants to verify the signature of the artifacts produced by the
  release will need to use Cosign V3 and point to the new bundle file or download the bundle and
  unpack it to get the certificate and signature files.

• all: Use split checksum for all binaries and distros (#​1582)
  The previous attempt at splitting the checksum file for AIX releases was not successful.
  The problem lies on the fac that .runtime.GOOS will always be the runtime of the compiled
  goreleaser binary ("linux" in this case). The only way to split the checksum file per target
  is what's implement here, but it ends up giving one checksum file per produced artifact.

🚀 New components 🚀

• icmpcheckreceiver: Add icmpcheckreceiver to the contrib distribution (#​1577)

💡 Enhancements 💡

• all: Add new binaries for aix/ppc64 (#​1424)

🧰 Bug fixes 🧰

• all: Skip Docker build and publish in AIX release job. (#​1580)
  The release for Contrib on AIX runs in its own job, where it doesn't build
  Docker images. The continue --merge phase of goreleaser runs all publishers
  by default, including the Docker manifests one. This will fail for AIX as
  the images aren't built.

checkstyle/checkstyle (checkstyle)

v13.11.0

Checkstyle 13.11.0 - https://checkstyle.org/releasenotes.html#Release_13.11.0

Breaking backward compatibility:

#​21080 - WriteTag: remove tagSeverity property and make Check to work only for violation of tag absence.

New:

#​20984 - new Check: PreferLiteralJavadocInlineTag.

Bug fixes:

#​13426 - Xdoc file generation should be separate project that executes in maven build as just another phase; remove doxia dependency.
#​21222 - Add PreferLiteralJavadocInlineTag in openjdk_checks.xml.
#​21101 - google_checks.xml: LocalVariableName/LocalFinalVariableName false positive for identifier example "guava33_4_6" from Google Java Style Guide.
#​20973 - Javadoc parse error on quoted HTML attribute value containing '<'.
#​19913 - Documentation Comments Style Guide - Avoid Latin.
#​17728 - Google style: False negative missing spacing between type and variable.

Other Changes:

`testExampleCountMatchesPropertyCount` incorrectly counts examples that only configure `violateExecutionOnNonTightHtml`.
Improve the Checkstyle landing page.
Create some ability to execute metadata file generation before test phase.
Improve Input coverage for compact sources (JEP 512) for all Checks.
Fix broken Javadoc method links in *.xml.vm file due to Doxia anchor encoding.
Fix violation message comments to use quoted text and remove associated suppressions.
Enforce file size on Java inputs.
Improvements to site workflow.
Website table of contents doesn't show use cases.
Make testExampleCountMatchesPropertyCount enforce exact example count match.
Renumber examples so default-config example is Example1.
Fix examples with duplicate violation behavior.
doc: remove redundant `toc` Doxia macro.
Update grammar inputs for JDK20.
enforce that a module's default-config example is always Example1.
TocMacro: TOC entry title should always come from config description, not from a property.
deployment of website to Sourceforge is failed.
Fix modules suppressed from the default-config example test.
weird XpathRegressionTest.REGEXP_JAVADOC_CHECKS list.
Remove old method from pitest exclude config.
Test's violation-line comparison uses absolute file lines instead of lines relative to the visible xdoc section.
remove usage of JavadocTags class.

v13.10.0

Checkstyle 13.10.0 - https://checkstyle.org/releasenotes.html#Release_13.10.0

Breaking backward compatibility:

#​5744 - JavadocVariable MissingJavadocMethod MissingJavadocType: Expand Javadoc violation messages to include named context.

New:

#​21071 - WriteTag: new messages when violation is on method.
#​19991 - NonEmptyAtclauseDescription should to validate since tags.
#​17841 - New Check: GoogleMethodName to fix false-negative on method names with underscores.
#​21079 - New Check: IllegalBlockTag.
#​20987 - New check: JavadocRegexp.
#​18064 - New check: ArrayBracketWhitespace.
#​18420 - New Check: GoogleMethodNameCheck to enforce Google Java Style Guide method naming.

Bug fixes:

#​20995 - Add MultilineCommentLeadingAsteriskPresence check to google_checks.xml.
#​3469 - JavadocMethod: check for duplicate parameter block tags.
#​20972 - Javadoc parse error on HTML comment with a line ending in a hyphen.
#​19931 - Documentation Comments Style Guide - Contents of package.html source file.
#​18842 - google_checks.xml incorrectly marks return inlined tag as violation from SummaryJavadoc.
#​19925 - Documentation Comments Style Guide - Custom Tags and Annotations.
#​19919 - Documentation Comments Style Guide - @param.
#​19808 - Add checks for Documentation Comments Style Guide - Notes.

Other Changes:

Web site Table of content for each page as right side panel.
Fix examples with duplicate violation behavior.
Fix violation message comments to use quoted text and remove associated suppressions.
bump org.gaul:modernizer-maven-plugin to 3.5.0.
Add xdocs test enforcing at least one default-config example per module.
make examples of WhitespaceAround compact.
Uncaught TypeError in resetStyling() due to missing .xright element across multiple pages when inspecting or interacting with left panel links.
Update writingjavadocchecks.html to actual state.
Website search: remove release notes from index.
Add test to validate Examples produce unique violations by behavior.
Move violation comments out of Javadoc for all input files.
Enforce file size on Java inputs.
Move violation comments above of annotated methods.
Search: exclude Example [code] results from index; add visible hint for "s" shortcut.
Add client-side search functionality to Checkstyle documentation website.
Update Ant Task table to have links to each property.
Rename "Doc" to "Prop" for properties in Search Bar.
WriteTag not triggered when on severity=ignore and tagSeverity=warning.
Add test enforcing that Example/UseCase paragraphs have extractable descriptive text for TocMacro.
WriteTag Example4 is not clear.
Improvements to diff report generation.
antlr-report workflow scans fork's master instead of PR branch, also support target project as comment argument.
JavadocParagraph: inconsistent AST structure when unexpected closing tag is found.
Add validation for end of line at the end of file for resources.
Add CI validation job for checkstyle-openrewrite-recipes.
Define violation messages for all violations.
Filters need xdoc macros to support non java files for config load.
Documentation Comments Style Guide - `@`deprecated.
Documentation Comments Style Guide - `@`since.
Resolve warnings in pitest CI run.
Mention good-fifth-issue in CONTRIBUTING.md.
Update all workflows participate in CI on PR to auto-cancel.
Documentation Comments Style Guide - Method descriptions begin with a verb phrase, Class/interface/field descriptions can omit the subject and simply state the object.
Documentation Comments Style Guide - Ordering Multiple Tags.
Update `xdoc section` snippet marker from double hyphen to single hyphen.
Replace author email with GitHub username in release notes.
Documentation Comments Style Guide - Use "this" instead of "the", Add description beyond the API name, Be clear when using the term "field".
Documentation Comments Style Guide - Use `<`code`>` style for keywords and names.
Documentation Comments Style Guide - Documenting Unchecked Exceptions.
Documentation Comments Style Guide - Method and constructor parentheses, Phrases instead of sentences, Third-person descriptions.
Documentation Comments Style Guide - `@`version.
Documentation Comments Style Guide - `@`see, `@`serial, `@`serialField, `@`serialData, {`@`link}.
Documentation Comments Style Guide - Writing API Specifications.
Documentation Comments Style Guide - Writing Programming Guide Documentation.
doc: mention JDK 25 is good to build checkstyle.

bndtools/bnd (biz.aQute.bnd:biz.aQute.bnd.gradle)

v7.4.0

Compare Source

lysine-dev/okhttp (com.squareup.okhttp3:okhttp)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
deficient because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts is now signed with our [new signing key]. This project and three sibling
  projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
  weren’t applied correctly.
• Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
• Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
  the HTTP call to crash.
• Upgrade: [Okio 3.18.1][okio_3_18_1].

graalvm/native-build-tools (org.graalvm.buildtools.native)

v1.1.9

Compare Source

What's Changed

• Make repository test output concise by default by @​jormundur00 in #​1004
• Decouple Maven plugin unit tests from remote bootstrap tasks by @​jormundur00 in #​1007
• Clarify build prerequisites and add a core build mode by @​jormundur00 in #​1012
• Release 1.1.8 by @​graalvmbot in #​1015
• Bump version to 1.1.9-SNAPSHOT by @​graalvmbot in #​1016
• Uplift the Native Image layer configuration model by @​jormundur00 in #​1011
• Update reachability metadata to 1.0.10 by @​graalvmbot in #​1021

Full Changelog: graalvm/native-build-tools@1.1.8...1.1.9

v1.1.8

Compare Source

What's Changed

• Release 1.1.7 by @​graalvmbot in #​1009
• Bump version to 1.1.8-SNAPSHOT by @​graalvmbot in #​1010
• Deprecate fallback plugin options by @​jormundur00 in #​997
• Update reachability metadata to 1.0.9 by @​graalvmbot in #​1014

Full Changelog: graalvm/native-build-tools@1.1.7...1.1.8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Merged · refreshed 2026-08-18 18:40 UTC

Status above doesn't look right?

• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.27%. Comparing base (f4bb945) to head (a6659de).

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #8730   +/-   ##
=========================================
  Coverage     91.26%   91.27%           
- Complexity    10461    10464    +3     
=========================================
  Files          1006     1006           
  Lines         28244    28244           
  Branches       3564     3564           
=========================================
+ Hits          25778    25780    +2     
  Misses         1674     1674           
+ Partials        792      790    -2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.