Bump the annet-deps group across 1 directory with 11 updates

[dependabot]

Bumps the annet-deps group with 11 updates in the / directory:

Package	From	To
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations	2.13.3	2.14.0
org.junit.jupiter:junit-jupiter-params	5.12.0	5.12.1
org.junit.jupiter:junit-jupiter-api	5.12.0	5.12.1
org.junit.jupiter:junit-jupiter-engine	5.12.0	5.12.1
org.junit.jupiter:junit-jupiter-migrationsupport	5.12.0	5.12.1
org.mockito:mockito-core	5.16.0	5.16.1
org.flywaydb:flyway-core	11.3.4	11.4.0
org.flywaydb:flyway-database-postgresql	11.3.4	11.4.0
org.eclipse.jetty:jetty-bom	12.0.17	12.0.18
org.eclipse.jetty.ee9:jetty-ee9-bom	12.0.17	12.0.18
org.webjars:swagger-ui	5.20.0	5.20.1

Updates io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations from 2.13.3 to 2.14.0

Release notes

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's releases.

Version 2.14.0

This release targets the OpenTelemetry SDK 1.48.0.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

Migration notes

• The java.net.http.HttpClient instrumentation package io.opentelemetry.instrumentation.httpclient was deprecated in favor of the new package name io.opentelemetry.instrumentation.javahttpclient
• The experimental opt-in jvm.buffer.memory.usage metric was renamed to jvm.buffer.memory.used in order to follow general semantic convention naming
• The Http *TelemetryBuilder generic signatures were simplified (#12858)

🌟 New javaagent instrumentation

• AWS Bedrock instrumentation, following Gen AI semantic conventions (#13355, #13408, #13473, #13410)
• ActiveJ HTTP server (#13335)
• Spring Pulsar (#13320)

🌟 New library instrumentation

• AWS Bedrock instrumentation, following Gen AI semantic conventions (#13355, #13408, #13473, #13410)

📈 Enhancements

• Support virtual threads in Spring Scheduling instrumentation (#13370)
• Redact query string values for http client spans (#13114)
• Support attribute lowercase modifier in JMX metrics yaml definitions (#13385)
• Add tapir path matching within pekko instrumentation (#13386)
• Support latest Axis2 version (#13490)
• Add instrumentation for Lambda Java interface HandleStreamRequest (#13466)
• Remove usage of gRPC internal api (#13510)
• Add options to disable gRPC per-message events (#13443)
• Add @​WithSpan option to break from existing context and start a new trace (#13112)

🛠️ Bug fixes

• Fix NoSuchElementException thrown by Akka instrumentation (#13360)
• Fix Spring Boot Starter MDC instrumentation for Logback not injecting trace_id (#13391)
• Fix opt-in invoke dynamic instrumentation mechanism in OpenJ9 (#13282)
• Fix spans in Pekko instrumentation on server timeout (#13435)
• Avoid overriding user's trace_id in Log4j MDC instrumentation (#13479)
• Fix gRPC message ID attribute (#13443)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​123liuziming @​anuraaga @​breedx-splk @​chlos

... (truncated)

Changelog

Sourced from io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations's changelog.

Version 2.14.0 (2025-03-13)

Migration notes

• The java.net.http.HttpClient instrumentation package io.opentelemetry.instrumentation.httpclient was deprecated in favor of the new package name io.opentelemetry.instrumentation.javahttpclient
• The experimental opt-in jvm.buffer.memory.usage metric was renamed to jvm.buffer.memory.used in order to follow general semantic convention naming
• The Http *TelemetryBuilder generic signatures were simplified (#12858)

🌟 New javaagent instrumentation

• AWS Bedrock instrumentation, following Gen AI semantic conventions (#13355, #13408, #13473, #13410)
• ActiveJ HTTP server (#13335)
• Spring Pulsar (#13320)

🌟 New library instrumentation

• AWS Bedrock instrumentation, following Gen AI semantic conventions (#13355, #13408, #13473, #13410)

📈 Enhancements

• Support virtual threads in Spring Scheduling instrumentation (#13370)
• Redact query string values for http client spans (#13114)
• Support attribute lowercase modifier in JMX metrics yaml definitions (#13385)
• Add tapir path matching within pekko instrumentation (#13386)
• Support latest Axis2 version (#13490)
• Add instrumentation for Lambda Java interface HandleStreamRequest (#13466)
• Remove usage of gRPC internal api (#13510)

... (truncated)

Commits

• fe01834 [release/v2.14.x] Prepare release 2.14.0 (#13520)
• 4254751 Update change log for upcoming release (#13513)
• 7938d83 Avoid codeql zip slip warning (#13193)
• 943fecb Improve release workflow (#13518)
• 76dc8aa Re-add test runtime hints (#13511)
• 287b097 fix(deps): update armeria packages to v1.32.1 (patch) (#13515)
• 0477d38 Add @​WithSpan option to break from existing context (#13112)
• b54b200 fix spelling (#13517)
• 4345a77 Fix build (#13514)
• ffecc2c Fixes and options for gRPC instrumentation (#13443)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-migrationsupport from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-migrationsupport's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.16.0 to 5.16.1

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.16.1

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.1

• 2025-03-15 - 3 commit(s) by Adrian Roos, Jérôme Prinet, Rafael Winterhalter
• Remove Arrays.asList from critical stubbing path in GenericMetadataSu… [(#3610)](mockito/mockito#3610)
• Rework of injection strategy in the context of modules [(#3608)](mockito/mockito#3608)
• Adjust inline mocking snippet to allow task relocatability [(#3606)](mockito/mockito#3606)
• Inline mocking configuration snippet for Gradle should allow task relocatability [(#3605)](mockito/mockito#3605)

Commits

• d000e63 Rework of injection strategy in the context of modules (#3608)
• 0215884 Remove Arrays.asList from critical stubbing path in GenericMetadataSupport (#...
• d185035 Add reference to Gradle documentation on how to make task relocatable (#3606)
• See full diff in compare view

Updates org.flywaydb:flyway-core from 11.3.4 to 11.4.0

Release notes

Sourced from org.flywaydb:flyway-core's releases.

Flyway 11.4.0

See release notes here

CLI artifact available here

Commits

• 6cfa279 Bump version to flyway-11.4.0
• See full diff in compare view

Updates org.flywaydb:flyway-database-postgresql from 11.3.4 to 11.4.0

Updates org.flywaydb:flyway-database-postgresql from 11.3.4 to 11.4.0

Updates org.junit.jupiter:junit-jupiter-migrationsupport from 5.12.0 to 5.12.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-migrationsupport's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.12.0...r5.12.1

Commits

• ba9c9ae Release 5.12.1
• e28ad4a Finalize 5.12.1 release notes
• 1044e2c Move entry to 5.12.1 release notes
• bea821d Fix Javadoc formatting
• 1a1a67d Set stable module name for the standalone JAR file
• 062d3fa Remove internal packages from API reports
• 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
• 1e135b9 Create initial 5.12.1 release notes from template
• d540e4f Link to correct method
• 31d60b7 Split API reports by module and package
• Additional commits viewable in compare view

Updates org.eclipse.jetty:jetty-bom from 12.0.17 to 12.0.18

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.0.18

Changelog

• #12892 - Module http-forwarded does not appear to be able to use the IP in X-Forwarded-For header with any TLS HTTP request if the module http2 is also loaded
• #12888 - ErrorPageHandler dispatcher returns incorrect 405 for failing POST requests (e.g. JAX-RS)
• #12882 - Regression: HttpConfiguration setResponseHeaderSize is ineffective in 12.0.17
• #12871 - Add module ee8-cdi-decorate or update ee10-cdi-decorate to allow run old web applications
• #12802 - Make Server::setDefaultHandler and Server::setErrorHandler arguments consistent

Commits

• 09e23e1 Updating to version 12.0.18
• d4e8d2f Merge pull request #12899 from jetty/jetty-12.0.x-12888-allow-post-on-errordi...
• a488f78 Update license header
• 5095da2 Issue #12888 support error dispatch for static error pages on POST
• 899868a Fixes #12892 - Module http-forwarded does not appear to be able to use the IP...
• a301c14 no need to keep 60 history for working branches or PR (#12890)
• 0e4b34d Fixes #12882 - HttpConfiguration setResponseHeaderSize is ineffective in 12.0...
• 92336ac Merge pull request #12878 from jetty/jetty-12.0.x-javadoc-build
• f9c430b Fixing version
• a5c6d47 Merge pull request #12873 from jetty/fix/12.0.x/ee8-cdi-impl
• Additional commits viewable in compare view

Updates org.eclipse.jetty.ee9:jetty-ee9-bom from 12.0.17 to 12.0.18

Release notes

Sourced from org.eclipse.jetty.ee9:jetty-ee9-bom's releases.

12.0.18

Changelog

• #12892 - Module http-forwarded does not appear to be able to use the IP in X-Forwarded-For header with any TLS HTTP request if the module http2 is also loaded
• #12888 - ErrorPageHandler dispatcher returns incorrect 405 for failing POST requests (e.g. JAX-RS)
• #12882 - Regression: HttpConfiguration setResponseHeaderSize is ineffective in 12.0.17
• #12871 - Add module ee8-cdi-decorate or update ee10-cdi-decorate to allow run old web applications
• #12802 - Make Server::setDefaultHandler and Server::setErrorHandler arguments consistent

Commits

• 09e23e1 Updating to version 12.0.18
• d4e8d2f Merge pull request #12899 from jetty/jetty-12.0.x-12888-allow-post-on-errordi...
• a488f78 Update license header
• 5095da2 Issue #12888 support error dispatch for static error pages on POST
• 899868a Fixes #12892 - Module http-forwarded does not appear to be able to use the IP...
• a301c14 no need to keep 60 history for working branches or PR (#12890)
• 0e4b34d Fixes #12882 - HttpConfiguration setResponseHeaderSize is ineffective in 12.0...
• 92336ac Merge pull request #12878 from jetty/jetty-12.0.x-javadoc-build
• f9c430b Fixing version
• a5c6d47 Merge pull request #12873 from jetty/fix/12.0.x/ee8-cdi-impl
• Additional commits viewable in compare view

Updates org.webjars:swagger-ui from 5.20.0 to 5.20.1

Release notes

Sourced from org.webjars:swagger-ui's releases.

Swagger UI v5.20.1 Released!

5.20.1 (2025-03-10)

Bug Fixes

• docker: fix security issues CVE-2024-56171, CVE-2025-24928 (#10351) (3dc2cd6)
• security: fix CVE-2025-27152 in Axios comming from SwaggerClient/ApiDOM ([email protected])

Commits

• e3043f9 chore(release): cut the v5.20.1 release
• 3dc2cd6 fix(docker): fix security issues CVE-2024-56171, CVE-2025-24928 (#10351)
• 55dca4c chore(deps-dev): bump eslint-config-prettier from 10.0.2 to 10.1.1 (#10349)
• b824368 chore(deps): bump axios from 1.7.9 to 1.8.2 (#10350)
• 78af2fc chore(deps-dev): bump @​commitlint/config-conventional (#10348)
• 6db50bd chore(deps-dev): bump terser-webpack-plugin from 5.3.13 to 5.3.14 (#10347)
• 6edfec5 chore(deps-dev): bump terser-webpack-plugin from 5.3.12 to 5.3.13 (#10346)
• aae5125 chore(deps-dev): bump stylelint from 16.14.1 to 16.15.0 (#10341)
• 27a08c6 chore(deps-dev): bump postcss from 8.5.2 to 8.5.3 (#10342)
• 6f33336 chore(deps-dev): bump prettier from 3.5.2 to 3.5.3 (#10338)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.