Post release update 2.26.1 (#2730)

* Post release update 2.26.1

* update cloudfoundry index

Author: laurit

CHANGELOG.md

@@ -8,13 +8,33 @@ and this repository adheres to [Semantic Versioning](https://semver.org/spec/v2.
 
 ## Unreleased
 
+## v2.26.1 - 2026-03-23
+
+### General
+
+- OpenTelemetry Instrumentation for Java has been updated to version 2.26.1.
+
+### 🔒 Security fixes
+
+- Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution
+  ([CVE-2026-33701](https://github.com/signalfx/splunk-otel-java/security/advisories/GHSA-h8w2-rv57-vc6f),
+  [#16979](https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16979))
+
+### ⚠️⚠️ Breaking changes ⚠️⚠️
+
+- Context propagation format for RMI was changed [#16979](https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16979)
+
 ## v2.26.0 - 2026-03-18
 
+### General
+
 - OpenTelemetry Java SDK has been updated to version 1.60.1.
 - OpenTelemetry Instrumentation for Java has been updated to version 2.26.0.
 
 ## v2.25.1 - 2026-02-26
 
+### General
+
 - Update CSA to version 26.2.1-1436.
 
 ## v2.25.0 - 2026-02-20
@@ -48,6 +68,8 @@ and this repository adheres to [Semantic Versioning](https://semver.org/spec/v2.
 
 ## v2.21.1 - 2025-10-28
 
+### General
+
 - Update CSA version to 25.10.0-1399 
 
 ## v2.21.0 - 2025-10-22

README.md

@@ -1,7 +1,7 @@
 # Splunk Distribution of OpenTelemetry Java
 
 ![Stable](https://img.shields.io/badge/status-stable-informational)
-[![OpenTelemetry Instrumentation for Java Version](https://img.shields.io/badge/otel-2.26.0-blueviolet)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.26.0)
+[![OpenTelemetry Instrumentation for Java Version](https://img.shields.io/badge/otel-2.26.1-blueviolet)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.26.1)
 [![Splunk GDI specification](https://img.shields.io/badge/GDI-1.8.0-blueviolet)](https://github.com/signalfx/gdi-specification/releases/tag/v1.8.0)
 [![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/signalfx/splunk-otel-java?include_prereleases)](https://github.com/signalfx/splunk-otel-java/releases)
 [![Maven Central](https://img.shields.io/maven-central/v/com.splunk/splunk-otel-javaagent)](https://central.sonatype.com/artifact/com.splunk/splunk-otel-javaagent)
@@ -79,11 +79,11 @@ To extend the instrumentation with the OpenTelemetry Instrumentation for Java,
 you have to use a compatible API version.
 
 <!-- IMPORTANT: do not change comments or break those lines below -->
-The Splunk Distribution of OpenTelemetry Java version <!--SPLUNK_VERSION-->2.26.0<!--SPLUNK_VERSION--> is compatible
+The Splunk Distribution of OpenTelemetry Java version <!--SPLUNK_VERSION-->2.26.1<!--SPLUNK_VERSION--> is compatible
 with:
 
 * OpenTelemetry API version <!--OTEL_VERSION-->1.60.1<!--OTEL_VERSION-->
-* OpenTelemetry Instrumentation for Java version <!--OTEL_INSTRUMENTATION_VERSION-->2.26.0<!--OTEL_INSTRUMENTATION_VERSION-->
+* OpenTelemetry Instrumentation for Java version <!--OTEL_INSTRUMENTATION_VERSION-->2.26.1<!--OTEL_INSTRUMENTATION_VERSION-->
 
 ## Snapshot builds
 

dependencyManagement/build.gradle.kts

@@ -4,7 +4,7 @@ plugins {
 
 val otelVersion = "1.60.1"
 val otelAlphaVersion = otelVersion.replaceFirst("(-SNAPSHOT)?$".toRegex(), "-alpha$1")
-val otelInstrumentationVersion = "2.26.0-SNAPSHOT"
+val otelInstrumentationVersion = "2.27.0-SNAPSHOT"
 val otelInstrumentationAlphaVersion =  otelInstrumentationVersion.replaceFirst("(-SNAPSHOT)?$".toRegex(), "-alpha$1")
 val otelContribAlphaVersion = "1.54.0-alpha"
 

deployments/cloudfoundry/buildpack/README.md

@@ -40,7 +40,7 @@ If you want to use a specific version of the Java agent in your application, you
 environment variable before application deployment, either using `cf set-env` or the `manifest.yml` file:
 
 ```sh
-$ cf set-env SPLUNK_OTEL_JAVA_VERSION 2.26.0
+$ cf set-env SPLUNK_OTEL_JAVA_VERSION 2.26.1
 ```
 
 By default, the [latest](https://github.com/signalfx/splunk-otel-java/releases/latest) available agent version is used.

deployments/cloudfoundry/index.yml

@@ -55,3 +55,4 @@
 2.25.0: https://github.com/signalfx/splunk-otel-java/releases/download/v2.25.0/splunk-otel-javaagent.jar
 2.25.1: https://github.com/signalfx/splunk-otel-java/releases/download/v2.25.1/splunk-otel-javaagent.jar
 2.26.0: https://github.com/signalfx/splunk-otel-java/releases/download/v2.26.0/splunk-otel-javaagent.jar
+2.26.1: https://github.com/signalfx/splunk-otel-java/releases/download/v2.26.1/splunk-otel-javaagent.jar

licenses/licenses.md

@@ -1,7 +1,7 @@
 
 # splunk-otel-javaagent
 ## Dependency License Report
-_2026-03-21 14:13:58 EET_
+_2026-03-24 10:39:46 EET_
 ## Apache License, Version 2.0
 
 **1** **Group:** `com.squareup.okhttp3` **Name:** `okhttp` **Version:** `5.3.2` 
@@ -92,7 +92,7 @@ _2026-03-21 14:13:58 EET_
 > - **POM Project URL**: [https://github.com/open-telemetry/opentelemetry-java-contrib](https://github.com/open-telemetry/opentelemetry-java-contrib)
 > - **POM License**: Apache License, Version 2.0 - [https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)
 
-**23** **Group:** `io.opentelemetry.instrumentation` **Name:** `opentelemetry-instrumentation-bom-alpha` **Version:** `2.26.0-alpha-SNAPSHOT` 
+**23** **Group:** `io.opentelemetry.instrumentation` **Name:** `opentelemetry-instrumentation-bom-alpha` **Version:** `2.27.0-alpha-SNAPSHOT` 
 > - **POM Project URL**: [https://github.com/open-telemetry/opentelemetry-java-instrumentation](https://github.com/open-telemetry/opentelemetry-java-instrumentation)
 > - **POM License**: Apache License, Version 2.0 - [https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)