Remove 3.25.8 from protobuf compatibility testing because the gen code
has already been upgraded to 4.x.

We received vulnerability report for logback v1.5.21. Even though it is
only used in tests and does not affect customers, it is still good to
upgrade logback to 1.5.25 in tests.

🤖 I have created a release *beep* *boop*
---


<details><summary>2.66.2-SNAPSHOT</summary>

### Updating meta-information for bleeding-edge SNAPSHOT release.
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

## Summary
This PR introduces a new tracing mechanism in GAX that allows recording
traces using OpenTelemetry. It provides a way of recording spans and
attributes, following the existing `ApiTracer` class pattern with a few
tracing-specific additions. The implementation is meant to be extensible
to support other implementations.

## New Classes
- **`TraceManager`**: An interface for managing spans and attributes;
can be implemented by observability frameworks.
- **`OpenTelemetryTraceManager`**: An implementation of `TraceManager`
that uses the OpenTelemetry API.
- **`AppCentricTracer`**: An `ApiTracer` implementation that delegates
span management to a `TraceManager`.
- **`AppCentricTracerFactory`**: A factory for creating
`AppCentricTracer` instances.
- **`ApiTracerContext`**: A context object that carries information
(like `EndpointContext`'s server address property) used to infer common
attributes for all tracers.
- **`Span`**: A handle returned by `TraceManager` to manage the
lifecycle of a specific span (ending it, recording errors, or setting
attributes).

## Approach
### Connecting Tracer with Manager
The implementation aims to decouple `AppCentricTracer` from
`TraceManager`. When a tracer starts an operation or an attempt, it
requests a `Span` from the recorder. This handle allows the tracer to
update the span (e.g., adding attributes or recording errors) to keep
`AppCentricTracer` separated from specific recorder implementations
(like OpenTelemetry's `Span` object).

### Attribute Inference via `ApiTracerContext`
To provide a source of Span Attributes that are common to all
operations, we introduced `ApiTracerContext`. This context is passed to
`ApiTracerFactory` and contains information such as serverAddress
(provided by `EndpointContext`). It is operated by `ClientContext`.
Initially, only `serverAddress` is contained in this class and it's
meant to obtain the `server.address` attribute.
The class is ultimately operated by `AppCentricTracer` to extract the
necessary attributes.

### Integration Tests
A new integration test, `ITOtelTracing`, was added to the
`java-showcase` module:
- It validates that the expected spans (operation and attempt spans) are
recorded with the correct names, parent-child relationships, and
attributes (including `server.address` and `gcp.client.language`).


#### Note on java-bigtable downstream check
Since
[SkipTrailersTest](https://github.com/googleapis/java-bigtable/blob/49fe7692c55747714ada4296ff0f856b1109eba5/google-cloud-bigtable/src/test/java/com/google/cloud/bigtable/data/v2/stub/SkipTrailersTest.java#L97)
mocks the tracer factory, the `EndpointContext` call to
`apiTracerFactory.withContext()` returns a null factory, causing a null
pointer exception when building the client context.
We expect the test to be adjusted with this change with the next
release.

### Confirmation in Cloud Trace
<img width="1801" height="843" alt="image"
src="https://github.com/user-attachments/assets/dfccf278-7bfc-43fe-bf64-51cae21494ea"
/>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

chore: update googleapis commit at Thu Feb  5 03:00:22 UTC 2026

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[com.google.auth:google-auth-library-bom](https://togithub.com/googleapis/google-auth-library-java)
| minor | `1.42.1` -> `1.43.0` |
|
[com.google.errorprone:error_prone_annotations](https://errorprone.info)
([source](https://togithub.com/google/error-prone)) | minor | `2.46.0`
-> `2.47.0` |
|
[com.google.protobuf:protobuf-java](https://developers.google.com/protocol-buffers/)
([source](https://togithub.com/protocolbuffers/protobuf)) | patch |
`4.33.4` -> `4.33.5` |
| [io.grpc:grpc-bom](https://togithub.com/grpc/grpc-java) | minor |
`1.78.0` -> `1.79.0` |
|
[io.opentelemetry:opentelemetry-bom](https://togithub.com/open-telemetry/opentelemetry-java)
| minor | `1.58.0` -> `1.59.0` |
| [org.apache.httpcomponents.core5:httpcore5](https://hc.apache.org/) |
patch | `5.4` -> `5.4.1` |

---

### Release Notes

<details>
<summary>googleapis/google-auth-library-java
(com.google.auth:google-auth-library-bom)</summary>

###
[`v1.43.0`](https://togithub.com/googleapis/google-auth-library-java/blob/HEAD/CHANGELOG.md#1430-2026-02-10)

[Compare
Source](https://togithub.com/googleapis/google-auth-library-java/compare/v1.42.1...v1.43.0)

##### Features

- Next release from main branch is 1.43.0
([#&#8203;1887](https://togithub.com/googleapis/google-auth-library-java/issues/1887))
([bec0ece](https://togithub.com/googleapis/google-auth-library-java/commit/bec0ecea8d1064a3467c4329a0d09f7d5705f84d))

##### Bug Fixes

- Deserialization checks valid class types for HttpTransportFactory
([#&#8203;1882](https://togithub.com/googleapis/google-auth-library-java/issues/1882))
([76ff74e](https://togithub.com/googleapis/google-auth-library-java/commit/76ff74e4c810d54763ca34d4f483730c43c329a8))

</details>

<details>
<summary>google/error-prone
(com.google.errorprone:error_prone_annotations)</summary>

###
[`v2.47.0`](https://togithub.com/google/error-prone/releases/tag/v2.47.0):
Error Prone 2.47.0

[Compare
Source](https://togithub.com/google/error-prone/compare/v2.46.0...v2.47.0)

New checks:

-
[`InterruptedInCatchBlock`](https://errorprone.info/bugpattern/InterruptedInCatchBlock):
Detect accidental calls to `Thread.interrupted()` inside of
`catch(InterruptedException e)` blocks.
- [`RefactorSwitch`](https://errorprone.info/bugpattern/RefactorSwitch):
Refactorings to simplify arrow switches
-
[`UnnamedVariable`](https://errorprone.info/bugpattern/UnnamedVariable):
Rename unused variables to `_`

Closed issues:
[#&#8203;1811](https://togithub.com/google/error-prone/issues/1811),
[#&#8203;4168](https://togithub.com/google/error-prone/issues/4168),
[#&#8203;5459](https://togithub.com/google/error-prone/issues/5459),
[#&#8203;5460](https://togithub.com/google/error-prone/issues/5460)

Full changelog:
google/error-prone@v2.46.0...v2.47.0

</details>

<details>
<summary>grpc/grpc-java (io.grpc:grpc-bom)</summary>

###
[`v1.79.0`](https://togithub.com/grpc/grpc-java/releases/tag/v1.79.0)

[Compare
Source](https://togithub.com/grpc/grpc-java/compare/v1.78.0...v1.79.0)

**API Changes**

- core: Delete the never-used
io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer)
([#&#8203;12580](https://togithub.com/grpc/grpc-java/issues/12580))
([`738782f`](https://togithub.com/grpc/grpc-java/commit/738782fb0)).
This is deeply internal and not accessible, so shouldn’t impact
anything. However, Apache Arrow Java [uses reflection to access private
fields](https://togithub.com/apache/arrow-java/blob/96156ccc2bf933c75c852ca7c04418a61f87defd/flight/flight-core/src/main/java/org/apache/arrow/flight/grpc/GetReadableBuffer.java#L44-L45);
[GH-939: Remove reflection for gRPC
buffers](https://togithub.com/apache/arrow-java/pull/954) is swapping to
gRPC’s public zero-copy APIs

- opentelemetry: Add target attribute filter for metrics
([#&#8203;12587](https://togithub.com/grpc/grpc-java/issues/12587)).
Introduce an optional Predicate targetAttributeFilter to control how
grpc.target is recorded in OpenTelemetry client metrics. When a filter
is provided, targets rejected by the predicate are normalized to "other"
to reduce grpc.target metric cardinality, while accepted targets are
recorded as-is. If no filter is set, existing behavior is preserved.
This change adds a new Builder API on GrpcOpenTelemetry to allow
applications to configure the filter. 

**Behavior Changes**

- core: Convert AutoConfiguredLB to an actual LB
([`4bbf8ee`](https://togithub.com/grpc/grpc-java/commit/4bbf8eee5)).
This is an internal refactoring, but it does improve how errors are
handled for broken binaries. Previously, not being able to load
pick_first would result in a channel panic. Now it is handled as a
regular load balancing error

- okhttp: Assert no pending streams before transport READY
([#&#8203;12566](https://togithub.com/grpc/grpc-java/issues/12566))
([`ed6d175`](https://togithub.com/grpc/grpc-java/commit/ed6d175fc)). No
pending streams should exist when the transport transitions to READY.
This PR adds an assertion to help verify this invariant.

**Bug Fixes**

- core: PickFirstLB should not return a subchannel during CONNECTING
([`228fc8e`](https://togithub.com/grpc/grpc-java/commit/228fc8ecd)).
Pick-first in grpc-java has behaved this way since it was created, and
it was of no consequence. However, now there are some load balancing
policies (mainly RLS) that will do a pick() and hope the result to be
reasonably accurate for metrics.

**Improvements**

- core: Improve DEADLINE_EXCEEDED message for CallCreds delays
([`ead532b`](https://togithub.com/grpc/grpc-java/commit/ead532b39)).
Previously the error message contained “buffered_nanos” and
“waiting_for_connection” for connection delays. However, we discovered
the same strings were also used if waiting on CallCredentials. Now
you’ll see details like “connecting_and_lb_delay”,
“call_credentials_delay”, and “was_still_waiting”.

- opentelemetry: Add Android API checking
([`a9f73f4`](https://togithub.com/grpc/grpc-java/commit/a9f73f4c0)).
Previously we assumed OpenTelemetry support would not be used on
Android. It did happen to be compatible with Android, but since
OpenTelemetry does have some Android support, we now have a check that
it remains compatible

- core: Catch Errors when calling complex config parsing code
([`a535ed7`](https://togithub.com/grpc/grpc-java/commit/a535ed799)).
Error (and any other Throwable) is now caught and handled when parsing
configuration (e.g., service config, xds). This will cause such failures
to be handled gracefully instead of panicking the channel

- core: Implement LoadBalancer.Helper.createOobChannel() with the
internals of createResolvingOobChannel()
([`3915d02`](https://togithub.com/grpc/grpc-java/commit/3915d029c)).
This API is only expected to be relevant to the gRPC-LB lookaside load
balancer, and is not believed to have behavior changes. Out-of-band
channel had been implemented with its own stripped-down Channel without
load balancing. Reimplementing using the resolving oob channel makes it
a full-fledged channel and reduces the burden when integrating new
features and allows us to have a ManagedChannelBuilder to use with
efforts like [gRFC A110: Child Channel
Options](https://togithub.com/grpc/proposal/pull/529).

- xds: Implement the proactive connection logic in RingHashLoadBalancer
as outlined in gRFC A61
([#&#8203;12596](https://togithub.com/grpc/grpc-java/issues/12596)).
Previously, the Java implementation only initialized child balancers
when a ring-chosen endpoint was in TRANSIENT_FAILURE during a picker's
pickSubchannel call. This PR adds the missing logic: when a child
balancer reports TRANSIENT_FAILURE, the LoadBalancer now proactively
initializes the first available IDLE child if no other children are
currently connecting or ready.

This ensures a backup subchannel starts warming up immediately outside
the RPC flow, reducing failover latency and improving overall
resilience. This behavior was previously present but was inadvertently
lost after
[#&#8203;10610](https://togithub.com/grpc/grpc-java/pull/10610).

- api: Add RFC 3986 support to DnsNameResolverProvider
([#&#8203;12602](https://togithub.com/grpc/grpc-java/issues/12602))
([`f65127c`](https://togithub.com/grpc/grpc-java/commit/f65127cf7))
Experimental RFC 3986 target URI parsing mode (disabled by default)

**New Features**

- opentelemetry: Actual reason for the disconnects in subchannel
metrics([`6b2f758`](https://togithub.com/grpc/grpc-java/commit/6b2f7580c)),
completing the remaining work in [gRFC A96: OTel metrics for
Subchannels](https://togithub.com/grpc/proposal/pull/485/files)

**Dependencies** 

- protobuf: Upgrade Bazel protobuf to 33.1
([#&#8203;12553](https://togithub.com/grpc/grpc-java/issues/12553))
([`b61a8f4`](https://togithub.com/grpc/grpc-java/commit/b61a8f49c)) and
load java_proto_library from the protobuf repo
([`c7f3cdb`](https://togithub.com/grpc/grpc-java/commit/c7f3cdbc3))

- protobuf: Fix build with Bazel 9 by upgrading bazel_jar_jar and
grpc-proto versions
([#&#8203;12569](https://togithub.com/grpc/grpc-java/issues/12569))

- Upgrade dependencies
([#&#8203;12588](https://togithub.com/grpc/grpc-java/issues/12588))
([`6422092`](https://togithub.com/grpc/grpc-java/commit/6422092e3))
Netty to 4.1.130, error-prone annotations to 2.45.0, google-auth-library
to 1.41.0, tomcat-embed-core9 to 9.0.113, tomcat-embed-core to 10.1.50,
opentelemetry to 1.57.0, jetty-ee10-servlet to 12.1.5,
jetty-http2-server to 12.1.5, google-cloud-logging to 3.23.9,
google-auth to 1.41.0, proto-google-common-protos to 2.63.2.

**Thanks to**

-   [@&#8203;benjaminp](https://togithub.com/benjaminp)
-   [@&#8203;becomeStar](https://togithub.com/becomeStar)
-   [@&#8203;meteorcloudy](https://togithub.com/meteorcloudy)

</details>

<details>
<summary>open-telemetry/opentelemetry-java
(io.opentelemetry:opentelemetry-bom)</summary>

###
[`v1.59.0`](https://togithub.com/open-telemetry/opentelemetry-java/blob/HEAD/CHANGELOG.md#Version-1590-2026-02-06)

[Compare
Source](https://togithub.com/open-telemetry/opentelemetry-java/compare/v1.58.0...v1.59.0)

##### API

-   Stabilize complex attributes

([#&#8203;7973](https://togithub.com/open-telemetry/opentelemetry-java/pull/7973))
-   Limit init valid hex array to range that can be true

([#&#8203;7809](https://togithub.com/open-telemetry/opentelemetry-java/pull/7809))

##### Extensions

-   Trace propagators: Deprecate OtTracePropagator

([#&#8203;8020](https://togithub.com/open-telemetry/opentelemetry-java/pull/8020))
-   Trace propagators: Deprecate JaegerPropagator

([#&#8203;8019](https://togithub.com/open-telemetry/opentelemetry-java/pull/8019))

##### SDK

- Move io.opentelemetry.sdk.internal to
io.opentelemetry.sdk.common.internal

([#&#8203;8003](https://togithub.com/open-telemetry/opentelemetry-java/pull/8003))
-   Always return ExtendedOpenTelemetry when incubator is available

([#&#8203;7991](https://togithub.com/open-telemetry/opentelemetry-java/pull/7991))

##### Traces

-   Fix memory leak in SdkSpan#spanEndingThread

([#&#8203;7984](https://togithub.com/open-telemetry/opentelemetry-java/pull/7984))

##### Metrics

-   Rework and publish metric benchmarks

([#&#8203;8000](https://togithub.com/open-telemetry/opentelemetry-java/pull/8000))
-   Update LongLastValueAggregator algo to avoid allocations

([#&#8203;8017](https://togithub.com/open-telemetry/opentelemetry-java/pull/8017))

##### Testing

-   Fix OTel JUnit5 Extension cleanup when using Nested test classes

([#&#8203;7999](https://togithub.com/open-telemetry/opentelemetry-java/pull/7999))
-   Add assertion support for Span hasException(null)

([#&#8203;8033](https://togithub.com/open-telemetry/opentelemetry-java/pull/8033))

##### Exporters

- **DEPRECATION**: `opentelemetry-exporter-zipkin` is now deprecated
with the
    last release planned for 1.65.0 (August 2026)

([#&#8203;7974](https://togithub.com/open-telemetry/opentelemetry-java/pull/7974))
-   Refactor http, grpc senders and promote to public API

([#&#8203;7782](https://togithub.com/open-telemetry/opentelemetry-java/pull/7782))

##### Extensions

-   Jaeger remote sampler: Remove unused code

([#&#8203;7970](https://togithub.com/open-telemetry/opentelemetry-java/pull/7970))
-   Incubator: Add AlwaysRecordSampler

([#&#8203;7877](https://togithub.com/open-telemetry/opentelemetry-java/pull/7877))

##### Project tooling

-   Align generate release contributors

([#&#8203;8023](https://togithub.com/open-telemetry/opentelemetry-java/pull/8023))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: Renovate Bot <[email protected]>

🤖 I have created a release *beep* *boop*
---


<details><summary>2.67.0</summary>

##
[2.67.0](v2.66.1...v2.67.0)
(2026-02-18)


### Features

* **observability:** introduce minimal tracing implementation
([#4105](#4105))
([e4e5e89](e4e5e89))


### Dependencies

* Upgrade Google-Auth-Library to v1.43.0
([#4114](#4114))
([825298b](825298b))
* Upgrade grpc to 1.76.3
([#4106](#4106))
([c6555f5](c6555f5))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>