[3.27] Upgrade micrometer to 1.16.6

[jmartisk]

DO NOT MERGE YET, this is still under discussion as to whether this bump is acceptable in a micro release

Fixes the following CVEs:
https://spring.io/security/cve-2026-40983
https://spring.io/security/cve-2026-40984

[quarkus-bot]

/cc @brunobat (micrometer), @ebullient (micrometer)

[quarkus-bot]

/cc @aloubyansky (3.27), @gsmet (3.27), @rsvoboda (3.27)

[rsvoboda]

https://github.com/micrometer-metrics/micrometer/releases/tag/v1.14.7 is from May 12 2025, so more than one year old.

micrometer-metrics/micrometer@v1.14.7...v1.16.6 shows 1234 commits

[brunobat]

This requires backports.

[brunobat]

I've run the builds for extensions/micrometer-opentelemetry/ and extensions/smallrye-metrics/ locally and they succeed.
This will include new features, especially from:
https://github.com/micrometer-metrics/micrometer/releases/tag/v1.15.0
https://github.com/micrometer-metrics/micrometer/releases/tag/v1.16.0

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 2d6a9dc.

Failing Jobs

Status	Name	Step	Failures	Logs	Raw logs	Build scan
❌	Native Tests - Windows support	Build	Failures	Logs	Raw logs	🔍

You can consult the Develocity build scans.

Failures

⚙️ Native Tests - Windows support #

- Failing: integration-tests/liquibase integration-tests/qute integration-tests/resteasy-jackson 

📦 integration-tests/liquibase

❌ Failed to execute goal io.quarkus:quarkus-maven-plugin:3.27.999-SNAPSHOT:build (default) on project quarkus-integration-test-liquibase: Failed to build quarkus application

📦 integration-tests/qute

❌ Failed to execute goal io.quarkus:quarkus-maven-plugin:3.27.999-SNAPSHOT:build (default) on project quarkus-integration-test-qute: Failed to build quarkus application

📦 integration-tests/resteasy-jackson

❌ Failed to execute goal io.quarkus:quarkus-maven-plugin:3.27.999-SNAPSHOT:build (default) on project quarkus-integration-test-resteasy-jackson: Failed to build quarkus application

[rsvoboda]

2026-06-16T10:37:17.0641230Z Caused by: io.smallrye.common.process.AbnormalExitException: Process exited abnormally (pid 7432) with exit code 20 with error output:
2026-06-16T10:37:17.0641938Z  > Error: Failed to find 'vcvarsall.bat' in a Visual Studio installation.
2026-06-16T10:37:17.0643053Z  > Please make sure that Visual Studio 2022 version 17.1.0 or later is installed on your system. You can download it at https://visualstudio.microsoft.com/downloads/. If this error persists, please try and run GraalVM Native Image in an x64 Native Tools Commad

Windows env issue, @gastaldi is it the same problem you were fixing yesterday?

[gastaldi]

Yes, I provided a fix in graalvm/setup-graalvm#221

UPDATE: actually no, this is something else

UPDATE: Actually yes, it is related. That PR should now fix it. I created #54908 which should be backported to fix that

[cescoffier]

If @brunobat is ok with it, I'm ok.

[brunobat]

Yes, this is the most practical path. The only alternative would be to cherry-pick the CVE fixes and perform a custom release of Micrometer.

[jmartisk]

It was decided to skip this upgrade in the end.