chore(deps): bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the / directory: com.google.api.grpc:proto-google-common-protos, com.google.guava:guava and io.opentelemetry:opentelemetry-api.

Updates com.google.api.grpc:proto-google-common-protos from 2.7.4 to 2.74.0

Release notes

Sourced from com.google.api.grpc:proto-google-common-protos's releases.

v2.68.0

2.68.0 (2026-03-17)

Features

• Add client request duration metric. (#4132) (6a76397)
• Add more attributes to golden signals metrics. (#4135) (59d0624)
• gax-httpjson: add HttpJsonErrorParser utility (#4137) (a1b7565)
• generator: add extra allowed modules that will not be removed from the monorepo if they are present (#4124) (774fe6e)
• o11y: introduce gcp.client.repo and gcp.client.artifact attributes (#4120) (105f644)
• o11y: Introduce rpc.system.name and rpc.method in gRPC (#4121) (7ab6d2e)
• o11y: introduce server.port attribute (#4128) (56aa343)

Bug Fixes

• add null checks for ApiTracerFactory in ClientContext (#4122) (4b3dbe2)
• Decrease log level for directpath warnings outside GCE (#4139) (c9651e7)
• gax-grpc: add pick_first fallback to direct path service config (#4143) (b150fe9)
• Populate method level attributes in metrics recording (#4149) (7b7e6c9)
• suppress warnings in generated projects for non-idiomatic durations (#4119) (4206e6e)
• Use ServiceName + MethodName as the regex for Otel (#2543) (b9ae73f)

Documentation

• hermetic_build: fix config field name in readme (#4130) (a0c8f67)

v2.67.0

2.67.0 (2026-02-18)

Features

• observability: introduce minimal tracing implementation (#4105) (e4e5e89)

Dependencies

• Upgrade Google-Auth-Library to v1.43.0 (#4114) (825298b)
• Upgrade grpc to 1.76.3 (#4106) (c6555f5)

v2.66.1

2.66.1 (2026-02-04)

Documentation

• [common-protos] update reference documentation for SelectionInput.DROPDOWN to include dynamic data sources and autosuggestion (9960262)

... (truncated)

Commits

• See full diff in compare view

Updates com.google.guava:guava from 33.6.0-jre to 33.7.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
  <version>33.7.0-android</version>
</dependency>

Jar files

• 33.7.0-jre.jar
• 33.7.0-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.0-jre
• 33.7.0-android

JDiff

• 33.7.0-jre vs. 33.6.0-jre
• 33.7.0-android vs. 33.6.0-android
• 33.7.0-android vs. 33.7.0-jre

Changelog

• The Android jar now contains our Proguard configs. (b0668e7174)
• The Guava module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/MANIFEST.MF, which occasionally causes trouble for some users. (230019b31e)
• Our Android minSdkVersion is now 24 (Nougat). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (ea0af870d5)
• collect: Changed some ImmutableMap implementations to create a new, lightweight object on each call to view methods like keySet(), rather than creating and storing that object during the first call for reuse later. This is likely to slightly improve performance for some users, but it could lead to regressions in unusual cases, such as repeatedly calling asMultimap().inverse() on the same ImmutableMap instance. (e87d019e47)
• net: Added HttpHeaders constant for on-prefetch-activation. (abd06a3679)
• net: Added MediaType constants for application/yaml and application/x-pem-file. (a8e9533b49, 1d40e27a4b)
• util.concurrent: Fixed ExecutionSequencer queue stall when delegate executor throws RejectedExecutionException. (8410194eed)

Commits

• See full diff in compare view

Updates io.opentelemetry:opentelemetry-api from 1.62.0 to 1.65.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.65.0

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

• Ignore empty baggage keys in ImmutableBaggage.put (#8658)
• Use NumberFormatException in baggage decoder (#8593)
• Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

• Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

• Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
• Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
• Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
• Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

• Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

• Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

• Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)
• Record error.type on failed collections in PeriodicMetricReader (#8650)
• Testing: Fix LongExemplarAssert.hasFilteredAttributesSatisfyingExactly to enforce exact attribute matching (#8518)

Logs

• Fix ReadWriteLogRecord default getObservedTimestampEpochNanos returning the record timestamp (#8504)

Profiles

• Fix profiles data model attribute count parameter name and timestamp doc unit (#8514)

Exporters

• WARNING Zipkin: Delete opentelemetry-exporter-zipkin; the artifact is no longer published (#8677)
• OTLP: Use HTTP error response bodies in HttpExporter warning logs (#8428)
• OTLP: Fix OkHttpHttpSender mTLS when using the platform default trust store (#8565)
• OTLP: Fix sign extension on LogRecord flags in the low-allocation log marshaler (#8493)
• OTLP: Standardize OkHttpHttpSender, JdkHttpSender, and UpstreamGrpcSender shutdown to await executor/channel termination (#8495, #8627, #8624)
• OTLP: Log the underlying except/ion when a gRPC response frame is invalid (#8626)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.65.0 (2026-08-07)

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

• Ignore empty baggage keys in ImmutableBaggage.put (#8658)
• Use NumberFormatException in baggage decoder (#8593)
• Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

• Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

• Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
• Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
• Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
• Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

• Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

• Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

• Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)

... (truncated)

Commits

• 7bc11ed [release/v1.65.x] Prepare release 1.65.0 (#8705)
• 60d7ecf Prepare 1.65.0 (#8700)
• 6d41aa4 Bound jaeger-baggage parsing work by tokens rather than accepted entries (#8702)
• db1d6be Enforce last-value-wins semantics in AttributesMap without performance regres...
• 995cb3c Avoid unsafe string encoder on Android (#8637)
• 48b0185 Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
• 2009d58 Avoid exposing configuration values in errors (#8669)
• 3cafbbb Deprecate OpenCensus shim public API (#8674)
• 0e033e2 Remove stray token from addLogRecordProcessorCustomizer Javadoc (#8641)
• 3d1cce8 Fix ObfuscatedLoggerProvider Javadoc copy-paste example (#8639)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Pull request overview

Updates the Gradle version catalog to keep core third-party dependencies current across the build, using the centralized libs.versions.toml as the single source of truth.

Changes:

• Bump Guava from 33.6.0-jre to 33.7.0-jre.
• Bump OpenTelemetry API from 1.62.0 to 1.65.0.
• Bump proto-google-common-protos from 2.7.4 to 2.74.0.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Test Results

   75 files  ±0     75 suites  ±0   4m 24s ⏱️ - 1m 21s
1 511 tests ±0  1 511 ✅ ±0  0 💤 ±0  0 ❌ ±0 
2 244 runs  ±0  2 244 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 8c0d0b1. ± Comparison against base commit 212c40f.

This pull request removes 5 and adds 5 tests. Note that renamed tests count towards both.

com.amazonaws.services.schemaregistry.kafkaconnect.protobuf.fromconnectdata.ConnectDataToProtobufDataConverterTest ‑ [1] com.amazonaws.services.schemaregistry.kafkaconnect.protobuf.fromconnectdata.PrimitiveDataConverter@56a05324, Schema{STRUCT}
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [18] JSON, java.lang.Object@5f87e067
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [18] JSON, java.lang.Object@5f87e067, NONE
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [37] JSON, java.lang.Object@5f87e067
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [37] JSON, java.lang.Object@5f87e067, ZLIB

com.amazonaws.services.schemaregistry.kafkaconnect.protobuf.fromconnectdata.ConnectDataToProtobufDataConverterTest ‑ [1] com.amazonaws.services.schemaregistry.kafkaconnect.protobuf.fromconnectdata.PrimitiveDataConverter@11e71181, Schema{STRUCT}
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [18] JSON, java.lang.Object@3a6c74d9
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [18] JSON, java.lang.Object@3a6c74d9, NONE
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [37] JSON, java.lang.Object@3a6c74d9
com.amazonaws.services.schemaregistry.serializers.avro.GlueSchemaRegistrySerializationFacadeTest ‑ [37] JSON, java.lang.Object@3a6c74d9, ZLIB

[github-actions]

Coverage Report

Overall Project	78.99%	🍏

There is no coverage information present for the Files changed