Bump io.zipkin.reporter2:zipkin-sender-urlconnection from 2.17.2 to 3.5.3

[dependabot]

Bumps io.zipkin.reporter2:zipkin-sender-urlconnection from 2.17.2 to 3.5.3.

Release notes

Sourced from io.zipkin.reporter2:zipkin-sender-urlconnection's releases.

Zipkin Reporter 3.5.3

What's Changed

This is a maintenance release, updating for CVEs, and switching publishing from OSSRH to Sonatype Central Portal

Full Changelog: openzipkin/zipkin-reporter-java@3.5.1...3.5.3

Zipkin Reporter 3.5.1

What's Changed

• fix NPE when exception message is null by @​joaovieira-ca in openzipkin/zipkin-reporter-java#280
• Bump dependency versions by @​shakuzen in openzipkin/zipkin-reporter-java#281

New Contributors

• @​joaovieira-ca made their first contribution in openzipkin/zipkin-reporter-java#280

Full Changelog: openzipkin/zipkin-reporter-java@3.5.0...3.5.1

Zipkin Reporter 3.5

What's Changed

This adds a sender for the new pulsar transport contributed by @​CodePrometheus, and available by default as a collector in Zipkin 3.5. Thanks @​shakuzen for support on this work.

This also removes the dependency "io.zipkin.zipkin2:zipkin" from zipkin-reporter-bom, as it is no longer a required dependency. Thanks @​wilkinsona for the idea.

Finally, this updates all dependency versions as usual. Thanks a lot to @​reta who has been diligent in this project and others!

New Contributors

• @​CodePrometheus made their first contribution in openzipkin/zipkin-reporter-java#273

Full Changelog: openzipkin/zipkin-reporter-java@3.4.3...3.5.0

Zipkin Reporter 3.4 deprecates AsyncReporter/SpanHandler queuedMaxBytes and disables it by default.

When introduced, AsyncReporter had three ways to trigger a queue flush:

• queuedMaxSpans - when the number of spans in the queue exceeds a threshold
• queuedMaxBytes - when the size of the spans in the queue exceeds a threshold
• messageTimeout - when a span has been in the queue longer than a threshold

queuedMaxBytes was deprecated because requires time in the critical path, to calculate the size of a span to make sure it doesn't breach the threshold. This is problematic in tools that check for pinning, like Virtual Threads.

Thanks a lot to @​reta for sorting this out!

Full Changelog: https://github.com/openzipkin/zipkin-reporter-java/compare/3.3.0..3.4.1

Zipkin Reporter 3.3 adds a BaseHttpSender type, which eases http library integration. It also adds HttpEndpointSupplier which supports dynamic endpoint discovery such as from Eureka, as well utilities to create constants or rate-limit suppliers. Finally, brave users get a native PROTO3 encoder through the new MutableSpanBytesEncoder type.

These features were made in support of spring-boot, but available to any user with no new dependencies. For example, the PROTO encoder adds no library dependency, even if it increases the size of zipkin-reporter-brave by a couple dozen KB. A lion's share of thanks goes to @​reta and @​anuraaga who were on design and review duty for several days leading to this.

Here's an example of pulling most of these things together, integrating a sender with spring-cloud-loadbalancer (a client-side loadbalancer library).

... (truncated)

Commits

• 022b523 [maven-release-plugin] prepare release 3.5.3
• bf0b96c Add flatten-maven-plugin for Sonatype Central Portal (#284)
• 8165133 [maven-release-plugin] prepare for next development iteration
• 756074c [maven-release-plugin] prepare release 3.5.2
• 1787038 Updates all dependencies and changes build from 11/21 to 11/25 (#283)
• 7316a47 Switch from OSSRH to Sonatype Central Portal (#282)
• a28fe53 [maven-release-plugin] prepare for next development iteration
• c452f5c [maven-release-plugin] prepare release 3.5.1
• 1077abe Bump dependency versions (#281)
• 4b765b3 fix NPE when exception message is null (#280)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 3 days.