Bump io.opentelemetry:opentelemetry-bom from 1.25.0 to 1.62.0

[dependabot]

Bumps io.opentelemetry:opentelemetry-bom from 1.25.0 to 1.62.0.

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.62.0

API

Context

• Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

• Avoid parentContext allocation on span start for the common case (#8332)

Metrics

• Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
• Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

• BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
• BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
• OTLP: Fix null input handling in StringEncoder (#8312)
• OTLP: Align proto field types and wire tag names in marshalers (#8293)
• OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
• OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
• OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
• OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

• BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
• Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)
• Declarative config: Fix collection fields to not be initialized to empty by default (#8356)
• Incubator: Add EventToSpanEventBridge to bridge log-based events to span events (#8372)

Testing

• Add @Nullable to equalTo value argument in OpenTelemetryAssertions (#8301)
• Add hasValueSatisfying to LongPointAssert and DoublePointAssert for fuzzy value matching (#8328)
• Add containsPointsSatisfying to metric data asserts for "each given assertion must be satisfied by at least one point, extras allowed" checks on sum, gauge, histogram, exponential histogram, and summary data (#8329)

Project tooling

• Add initial OSGi support (#7964)
• Promote ApiUsageLogger to opentelemetry-common public API (#8318)
• Establish exception logging guidelines and fix inconsistent patterns across exporters and SDK (#8231)
• Add *.impl.* package naming convention for internal code with japicmp compatibility (#8325)
• Add Sonatype dependency audit to build (#8365)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.62.0 (2026-05-08)

API

Context

• Fix GHSA-rcgg-9c38-7xpx: Apply limits to baggage entries for W3CBaggagePropagator, OtTracePropagator, JaegerPropagator (#8378)

SDK

Traces

• Avoid parentContext allocation on span start for the common case (#8332)

Metrics

• Add setMaxExportBatchSize to PeriodicMetricReaderBuilder (#8296)
• Fix PeriodicMetricReader shutdown race that could drop the final flush (#8299)

Exporters

• BREAKING Prometheus: Change default server host from 0.0.0.0 to localhost (#8298)
• BREAKING Prometheus: Stop converting unit "1" to "ratio" (#8252)
• OTLP: Fix null input handling in StringEncoder (#8312)
• OTLP: Align proto field types and wire tag names in marshalers (#8293)
• OTLP: Fix MarshalerUtil sizeRepeatedString calculation (#8284)
• OTLP: Bound JdkHttpSender thread pool size to prevent unbounded thread creation (#8276)
• OTLP Profiles: Split profiles data model into separate sdk-profiles and JFR shim modules (#8207)
• OTLP Profiles: Publish alpha release of opentelemetry-sdk-profiles and opentelemetry-exporter-otlp-profiles (#8351)

Extensions

• BREAKING Declarative config: Extract to new opentelemetry-sdk-extension-declarative-config artifact with new package io.opentelemetry.sdk.autoconfigure.declarativeconfig (#8265)
• Autoconfigure: Add file size validation in OtlpConfigUtil to avoid unsafe cast to int (#8287)

... (truncated)

Commits

• d03621f [release/v1.62.x] Prepare release 1.62.0 (#8385)
• 3a62b7a Prepare 1.62.0 (#8378)
• 893910b docs: Expand SIG meeting welcoming language (#8383)
• 03837d3 Apply baggage limits (#8380)
• cdadad6 Update dependency org.osgi:org.osgi.test.bom to v1.3.0 (#8376)
• 8e0f196 Update error-prone monorepo to v2.49.0 (#8259)
• 2923430 Add initial OSGi support (#7964)
• 3f3780c Add guidance for null checking, promote ApiUsageLogger to opentelemetry-commo...
• e224e19 Port event span event bridge from contrib (#8372)
• b29f3df Update dependency com.google.api.grpc:proto-google-common-protos to v2.71.0 (...
• Additional commits viewable in compare view

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[mjameswh]

@dependabot rebase