Skip to content

Update upstream OpenTelemetry agent dependencies to 2.26.1#1017

Merged
SylvainJuge merged 1 commit into
mainfrom
updatecli_main_upgrade-upstream-agent-version
Mar 24, 2026
Merged

Update upstream OpenTelemetry agent dependencies to 2.26.1#1017
SylvainJuge merged 1 commit into
mainfrom
updatecli_main_upgrade-upstream-agent-version

Conversation

@elastic-observability-automation

@elastic-observability-automation elastic-observability-automation Bot commented Mar 24, 2026 •
edited by SylvainJuge
Loading

Copy link
Copy Markdown
Contributor

@elastic/apm-agent-java, can you please check and merge this PR?

Upgrade the upstream agent version and related transitive dependencies

Update upstream OpenTelemetry agent version and related dependencies

ran shell command "gradle/update-upstream.sh v2.26.1 && echo \"Update successful\""

v2.26.1 
This is a patch release on the previous 2.26.0 release, fixing the issue(s) below.

### 🔒 Security fixes

- Fix unsafe deserialization in RMI instrumentation that could lead to remote code execution ([CVE-2026-33701](https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-xw7x-h9fj-p2c7), [#16979](https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/16979))
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@elastic-observability-automation
elastic-observability-automation Bot requested a review from a team as a code owner March 24, 2026 06:20
@elastic-observability-automation elastic-observability-automation Bot added the dependencies Pull requests that update a dependency file label Mar 24, 2026
@SylvainJuge
SylvainJuge merged commit 83ee6c1 into main Mar 24, 2026
19 checks passed
@SylvainJuge
SylvainJuge deleted the updatecli_main_upgrade-upstream-agent-version branch March 24, 2026 08:04
@SylvainJuge SylvainJuge added the enhancement New feature or request label Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SylvainJuge SylvainJuge SylvainJuge approved these changes

Assignees

No one assigned

Labels

agent-java dependencies Pull requests that update a dependency file enhancement New feature or request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@SylvainJuge