Skip to content

[Snyk] Upgrade io.micrometer:micrometer-core from 1.1.5 to 1.16.3 - #3

Open
ryanmcmorrowsnyk wants to merge 1 commit into
mainfrom
snyk-upgrade-d7409d1dc152dc18de63437db512285c
Open

[Snyk] Upgrade io.micrometer:micrometer-core from 1.1.5 to 1.16.3#3
ryanmcmorrowsnyk wants to merge 1 commit into
mainfrom
snyk-upgrade-d7409d1dc152dc18de63437db512285c

Conversation

@ryanmcmorrowsnyk

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade io.micrometer:micrometer-core from 1.1.5 to 1.16.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 210 versions ahead of your current version.

  • The recommended version was released a month ago.

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade io.micrometer:micrometer-core from 1.1.5 to 1.16.3.

See this package in maven:
io.micrometer:micrometer-core

See this project in Snyk:
https://app.snyk.io/org/dev-team-1-GXHHqjKkdZpkvhZpMAbvFF/project/c0084c67-dd3e-4f7c-b3b5-cb4b40911bd5?utm_source=github&utm_medium=referral&page=upgrade-pr
@ryanmcmorrowsnyk

Copy link
Copy Markdown
Owner Author

Merge Risk: High

This upgrade of io.micrometer:micrometer-core from version 1.1.5 to 1.16.3 introduces several significant changes and deprecations that require developer attention.

Key Breaking Changes:

  • API Renaming (v1.10): The io.micrometer.common.Tags and io.micrometer.common.Tag classes have been renamed to io.micrometer.common.KeyValues and io.micrometer.common.KeyValue respectively. This will require updating imports and class references in your code.
  • JDK HttpClient Instrumentation (v1.13): The JDK HttpClient instrumentation has been moved from micrometer-core to a new micrometer-java11 module. If you are using this instrumentation, you will need to add a new dependency and update your import paths. The classes in micrometer-core were deprecated and scheduled for removal in version 1.15.0.
  • Prometheus Registry Changes (v1.13 & v1.16): The micrometer-registry-prometheus module was upgraded to use the Prometheus Java client 1.x, which resulted in breaking changes. The base package was changed from io.micrometer.prometheus to io.micrometer.prometheusmetrics. Additionally, in version 1.16, the sanitization of the colon character (:) in meter and tag names was changed; it is no longer replaced by an underscore (_).
  • Removed Annotations: Deprecated io.micrometer.core.lang annotations have been removed.

Recommendation:
Developers should carefully review their use of Micrometer APIs, especially concerning Tags, KeyValues, and any direct interactions with the Prometheus registry or JDK HttpClient instrumentation. Code modifications will be necessary to adapt to these changes. It is recommended to consult the official migration guides for detailed instructions.

Source: Micrometer Migration Guides

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants