fix(deps) Update io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom to v2.30.0

[Ahoo-Wang]

This PR contains the following updates:

Package	Change	Age	Confidence
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom	2.29.0 → 2.30.0

---

Release Notes

open-telemetry/opentelemetry-java-instrumentation (io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom)

v2.30.0

This release targets the OpenTelemetry SDK 1.64.0.

Note that many artifacts have the -alpha suffix attached to their version
number, reflecting that they will continue to have breaking changes. Please see
VERSIONING.md
for more details.

⚠️ Breaking changes to non-stable APIs

• Remove ExperimentalInstrumentationModule#getModuleGroup(). Built-in invokedynamic modules now
  share a single InstrumentationModuleClassLoader, and each extension is isolated in its own.
  (#​18859)
• Remove the deprecated InstrumentationModule.isIndyModule(); whether a module uses invokedynamic
  is now determined by the agent rather than declared per module.
  (#​19140)
• Remove deprecated query-related APIs from SqlClientAttributesGetter, CassandraRequest, and
  Experimental.
  (#​19165)
• Remove the deprecated Enduser* attribute-capturing APIs from the Spring Security 6.0 library;
  use the User* replacements instead.
  (#​19168)

🚫 Deprecations

• Deprecate only the Spring Boot starter ConfigProperties compatibility bean used with
  experimental declarative configuration, in favor of the new ConfigProvider bean; it will be
  removed in 3.0. The ConfigProperties bean remains supported for non-declarative configuration.
  (#​19175)
• Deprecate DeclarativeConfigPropertiesBridge and DeclarativeConfigPropertiesBridgeBuilder.
  Use DeclarativeConfigProperties directly or DeclarativeConfigBridge instead. Will be removed
  in 3.0.
  (#​19202)
• Deprecate ConfigPropertiesBackedConfigProvider in favor of DeclarativeConfigBridge. It will be
  removed in 2.31.0.
  (#​19220)

🌟 New javaagent instrumentation

• Add Javaagent instrumentation for HBase client 1.4.
  (#​19087)

🌟 New library instrumentation

• Add library instrumentation (ThriftTelemetry) for the Apache Thrift 0.13 async server.
  (#​19062)

📈 Enhancements

• Add async server tracing to the Apache Thrift 0.13 javaagent instrumentation; async server
  handlers were previously uninstrumented.
  (#​18994)
• Support database= as an alias for databaseName when extracting db.name from MSSQL JDBC
  URLs.
  (#​19029)
• Add batch-operation support to the experimental stable database semantic-convention opt-in
  (otel.semconv-stability.opt-in=database) across database instrumentations, including batch
  span names, db.operation.batch.size (including empty batches), and db.query.summary.
  (#​19034,
  #​19037,
  #​19054,
  #​19055,
  #​19056,
  #​19057,
  #​19143,
  #​19147,
  #​19161,
  #​19162,
  #​19164,
  #​19172,
  #​19189,
  #​19199)
• Add tracing for Lettuce 4.0 reactive commands, including exceptional completion and cancellation.
  (#​19071)
• Add the experimental Cassandra JMX metrics target system.
  (#​19080)
• Add experimental JFR-based jvm.thread.virtual.pinned and jvm.thread.virtual.submit_failed
  metrics for Java 19+ virtual threads; enable with
  otel.instrumentation.runtime-telemetry.emit-experimental-jfr-metrics=true.
  (#​19092)
• Capture custom object values passed to PreparedStatement.setObject() in query parameter
  attributes.
  (#​19093)
• InstrumentationModule now exposes injectedClassNames() and exposedClassNames() for indy
  instrumentations, so module authors no longer need ExperimentalInstrumentationModule for those
  helper-class declarations.
  (#​19142)
• Add captureTemplate and captureArguments options to the log4j, java-util-logging, and
  jboss-logmanager logging instrumentations, capturing the log message template and arguments as
  separate log.body.template / log.body.parameters attributes; logback already supported these
  options (#​15423).
  (#​19154)
• Add server.address and server.port attributes to Redisson client spans.
  (#​19191)
• Add server.address and server.port attributes to Lettuce Redis client spans.
  (#​19192)
• Add server.address and server.port attributes to Rediscala client spans.
  (#​19193)
• Set server.address on registry-backed Dubbo client spans to the registry address plus the
  service target (registry://host:port/interface:version:group) and leave server.port unset,
  gated behind the stable rpc semconv opt-in (otel.semconv-stability.opt-in=rpc); the resolved
  provider host and port are kept under the default semconv.
  (#​17244,
  #​19285)

🛠️ Bug fixes

• Fix a spurious duplicate warning when the application logger bridge is installed multiple times
  during startup.
  (#​19088)
• Fix MySQL and MariaDB db.connection_string values so IPv6 hosts stay bracketed instead of
  becoming ambiguous.
  (#​19078)
• Fix multi-topic Pulsar consumers so the internal background receive no longer creates a spurious
  extra receive span.
  (#​19095)
• SpringConfigProperties.getMap() no longer evaluates map property values as SpEL expressions;
  non-special-cased map properties now parse as comma-delimited key=value pairs via the SDK's
  DefaultConfigProperties, so settings like otel.instrumentation.common.peer-service-mapping
  work without SpEL syntax.
  (#​19113)
• Fix JMS destination extraction so an unreadable destination now leaves
  messaging.destination.name unset instead of reporting it as unknown.
  (#​19115)
• Fix the JMX Metric Insight jvm.class.loaded and jvm.class.unloaded metrics to use counter
  instruments.
  (#​19141)

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ad4b154ff9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Restore dependency BOM bump until approved

This version entry feeds libs.opentelemetry.instrumentation.bom, which :cosec-dependencies publishes via api(platform(...)), so bumping it changes the exported dependency versions for downstream consumers. The repository boundary requires approval before modifying cosec-dependencies versions; please either attach that approval to this change or revert the bump.

Useful? React with 👍 / 👎.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.52%. Comparing base (4284afa) to head (ad4b154).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #807   +/-   ##
=========================================
  Coverage     93.52%   93.52%           
  Complexity      637      637           
=========================================
  Files           153      153           
  Lines          1992     1992           
  Branches        159      159           
=========================================
  Hits           1863     1863           
  Misses           68       68           
  Partials         61       61           

Flag	Coverage Δ
unittests	93.52% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.