Bump io.opentelemetry.javaagent:opentelemetry-javaagent from 2.25.0 to 2.26.0

[dependabot]

Bumps io.opentelemetry.javaagent:opentelemetry-javaagent from 2.25.0 to 2.26.0.

Release notes

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's releases.

Version 2.26.0

This release targets the OpenTelemetry SDK 1.60.1.

Note that many artifacts have the -alpha suffix attached to their version number, reflecting that they are still alpha quality and will continue to have breaking changes. Please see the VERSIONING.md for more details.

⚠️ Breaking changes to non-stable APIs

• Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
• Remove deprecated HTTP client/server methods (#16167)
• Remove deprecated database instrumentation methods and classes (#16164)
• Remove deprecated peer-service mapping APIs (#16165)
• Make runtime-telemetry deprecated classes now internal (#16173)
• Remove AttributesExtractorUtil (#16152)
• Remove marker interface from SqlClientAttributesGetter (#16205)
• Merge network/server getter methods into DB attribute getters (#16264, #16268)
• Rename SQL sanitizer classes to SQL analyzer (#16269)
• Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

• Deprecated individual runtime-telemetry module classes in favor of unified module (#16087)
• Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (#16097)
• Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (#16130)
• Deprecated old ClickHouse instrumentation methods as part of simplification (#16206)
• Deprecated old R2DBC methods in favor of ones supporting db.system.name (#16251)
• Deprecated old DbClientAttributesGetter methods; added getErrorType() with implementations (#16276)
• Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions (#16298)
• Deprecated old DbClientAttributesGetter methods; added getDbName() to better support old/stable semconv split (#16318)

📈 Enhancements

• Add server address and port attributes for Spymemcached (#15242)
• Add Kafka Connect as a built-in JMX metrics target (#15561)
• Convert Lettuce instrumentation to use Instrumenter (#15838)
• OpenSearch Java client: capture sanitized search query bodies (#15634)
• Apply stable semantic conventions to Camel JMX metrics (#16088)
• Add jvm.file_descriptor.limit metric (#16174)
• Run gRPC client callbacks with parent context (#16175)
• SQL summary: handle EXPLAIN statements (#16184)
• Simplify InfluxDB instrumentation (#16207)
• Update histogram buckets for db.client.operation.duration (#16222)
• SQL summary: support Oracle dblink syntax (#16230)
• Add instrumentation for ZIO HTTP server route (#16232)
• Remove network attributes under database stable semconv flag (#16257)
• Support Javalin 7 (#16261)
• gRPC: initial stable semconv support (#16304)
• Populate os.version resource attribute (#16311)
• Camel: don't emit db spans under stable semconv (#16275)
• Dubbo: stable semconv support (#16352)
• Update the OpenTelemetry SDK version to 1.60.0 (#16407)

... (truncated)

Changelog

Sourced from io.opentelemetry.javaagent:opentelemetry-javaagent's changelog.

Version 2.26.0 (2026-03-14)

⚠️ Breaking changes to non-stable APIs

• Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload (#16170)
• Remove deprecated HTTP client/server methods (#16167)
• Remove deprecated database instrumentation methods and classes (#16164)
• Remove deprecated peer-service mapping APIs (#16165)
• Make runtime-telemetry deprecated classes now internal (#16173)
• Remove AttributesExtractorUtil (#16152)
• Remove marker interface from SqlClientAttributesGetter (#16205)
• Merge network/server getter methods into DB attribute getters (#16264, #16268)
• Rename SQL sanitizer classes to SQL analyzer (#16269)
• Rename internal common module packages to follow new naming convention (#16284, #16308, #16327, #16341, #16373)

🚫 Deprecations

• Deprecated individual runtime-telemetry module classes in favor of unified module (#16087)
• Deprecated old HTTP server query parameter methods in favor of sensitive query param handling (#16097)
• Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic conventions (#16130)
• Deprecated old ClickHouse instrumentation methods as part of simplification (#16206)
• Deprecated old R2DBC methods in favor of ones supporting db.system.name (#16251)
• Deprecated old DbClientAttributesGetter methods; added getErrorType() with implementations (#16276)
• Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions (#16298)
• Deprecated old DbClientAttributesGetter methods; added getDbName() to better support old/stable semconv split (#16318)

... (truncated)

Commits

• 778754b [release/v2.26.x] Release, Part 2 (#16522)
• 5de4e92 [release/v2.26.x] Prepare release 2.26.0 (#16500)
• eb7e05d Review fixes for akka-http-10.0:javaagent (#16496)
• 5c46530 Add one more PR to change log (#16494)
• 74f6be4 Review fixes for akka-actor-2.3:javaagent (#16493)
• 6e1f950 Opensearch transport query sanitization (#15634)
• 1748645 Update changelog for upcoming release (#16475)
• 947277b Review fixes for apache-dubbo-2.7:library-autoconfigure (#16482)
• 2a428fa Fix classLoaderMatcher review instructions (#16489)
• f4ccd57 Reduce open PR limit for code review workflow (#16491)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Eco CI Output [RUN-ID: 23127537993]:

Label	🖥 avg. CPU utilization [%]	🔋 Total Energy [Joules]	🔌 avg. Power [Watts]	Duration [Seconds]
Measurement #1	26.5855	1831.87	3.80	482.40
Total Run	26.59	1831.87	3.80	482.40
Additional overhead from Eco CI	N/A	9.89	6.96	1.42

🌳 CO2 Data:
City: CONSTANT, Lat: , Lon:
IP:
CO₂ from energy is: 0.611844580 g
CO₂ from manufacturing (embodied carbon) is: 0.137635381 g
Carbon Intensity for this location: 334 gCO₂eq/kWh
SCI: 0.749480 gCO₂eq / pipeline run emitted