Update all dependencies

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
codecov/codecov-action	action	minor	v7.0.0 → v7.1.1
github/codeql-action	action	minor	v4.37.8 → v4.38.3
gradle (source)		minor	9.7.1 → 9.8.1
gradle/actions	action	minor	v6.3.0 → v6.4.0
lint-staged	dependencies	minor	17.3.0 → 17.6.0
yarn (source)	packageManager	patch	4.18.0 → 4.18.1
com.google.guava:guava	dependencies	patch	33.7.1-jre → 33.7.2-jre
net.sourceforge.plantuml:plantuml	dependencies	patch	1.2026.6 → 1.2026.8
com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core	dependencies	minor	8.6.0 → 8.7.0
io.netty:netty-codec-http (source)	dependencies	patch	4.2.17.Final → 4.2.19.Final
io.netty:netty-codec (source)	dependencies	patch	4.2.17.Final → 4.2.19.Final
org.mockito:mockito-junit-jupiter	dependencies	minor	5.23.0 → 5.24.0
io.netty:netty-handler (source)	dependencies	patch	4.2.17.Final → 4.2.19.Final
org.slf4j:slf4j-api (source, changelog)	dependencies	patch	2.0.18 → 2.0.20
io.netty:netty-handler-proxy (source)	dependencies	patch	4.2.17.Final → 4.2.19.Final
org.apache.commons:commons-lang3 (source)	dependencies	minor	3.20.0 → 3.21.0
com.squareup.okio:okio	dependencies	patch	3.18.1 → 3.18.2
io.netty:netty-codec-socks (source)	dependencies	patch	4.2.17.Final → 4.2.19.Final
com.datadoghq:datadog-api-client	dependencies	minor	2.59.0 → 2.61.0
com.newrelic.agent.java:newrelic-api	dependencies	minor	9.4.0 → 9.5.0
io.opentelemetry:opentelemetry-api	dependencies	minor	1.65.0 → 1.67.0
org.apache.httpcomponents.client5:httpclient5 (source)	dependencies	patch	5.6.4 → 5.6.5
com.netflix.dgs.codegen	plugin	minor	8.6.0 → 8.7.0
org.jetbrains.kotlin.jvm	plugin	patch	2.4.10 → 2.4.21

---

Release Notes

codecov/codecov-action

v7.1.1

Compare Source

What's Changed

• chore(release): 7.1.1 by @​thomasrockhu-codecov in #​1973

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

Compare Source

What's Changed

• chore(release): 7.1.0 by @​thomasrockhu-codecov in #​1971

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

github/codeql-action

v4.38.3

Compare Source

• Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
• Update default CodeQL bundle version to 2.27.2. #​4203
• Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184

v4.38.2

Compare Source

• Update default CodeQL bundle version to 2.27.1. #​4160

v4.38.1

Compare Source

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

v4.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

gradle/gradle (gradle)

v9.8.1: 9.8.1

Compare Source

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

• Unauthenticated worker-to-daemon channel deserializes untrusted Java objects
• Deserialization of untrusted Java objects before authentication in the client - daemon communication
• Failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts

The following issues were resolved:

• [Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (#​39358)
• Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)
• Dependency resolution regression

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.8.0: 9.8.0

Compare Source

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

gradle/actions

v6.4.0

Compare Source

Highlights

Gradle version support status in the Job Summary

The actions now report the support status of every Gradle version used in a workflow, as job
annotations and in the Job Summary (#​1057). Thanks to @​ov7a for the contribution.

version kind	job annotation	version table	below the table
End-of-life — two or more major versions behind the latest release	warning	⚠️	expandable section naming the affected release lines, pointing at the Gradle Security Subscription
Out of date — one major behind, or more than two minors behind on the current major	notice	ℹ️	one-line legend pointing at the Gradle release lifecycle docs
Current	none	—	—

Deliberately not reported: patch releases (being on 9.7.0 when 9.7.1 exists is not flagged) and
pre-releases (release candidates, milestones and snapshots never produce annotations). The latest
Gradle release is determined from the wrapper checksum data already bundled with the action, so no
network access is required.

Note that these annotations are emitted independently of the add-job-summary setting: setting
add-job-summary: 'never' suppresses the Job Summary itself, but the warning and notice annotations
remain.

Gradle itself is now reported in the dependency graph

The dependency-submission action now applies v1.5.0 of the
GitHub Dependency Graph Gradle Plugin
(up from v1.4.2) (#​1069).

The headline change is that the Gradle Build Tool running the build is now reported as an
org.gradle:gradle-core dependency, so that GitHub can surface known vulnerabilities in the version
of Gradle used to run your build. These are the coordinates that GitHub advisories for the Gradle
Build Tool are published against.

Details worth knowing:

• The entry is always reported as a direct dependency with development scope.
• It is not affected by the project, configuration or scope filters, so it appears even in graphs
  that filter aggressively.
• Expect dependency graphs to gain this one new entry the first time a build runs after upgrading.

A new Gradle signing key, if you use dependency verification

[!IMPORTANT]
If your build has dependency verification
enabled, you must add a second trusted key before upgrading, or Dependency Graph generation will
fail signature verification.

github-dependency-graph-gradle-plugin 1.5.0 is signed with a new Gradle signing subkey, and the
key previously documented in our setup guide has been revoked upstream:

Artifact	Signing key
org.gradle:github-dependency-graph-gradle-plugin 1.5.0 and later	E2879931BCA1A42E55F2D64DD9B2DFBD9F3298BA (new)
org.gradle plugin versions before the rotation	7B79ADD11F8A779FE90FD3D0893A028475557671 (old, revoked)
com.gradle Develocity Gradle plugin, including 4.5.0	7B79ADD11F8A779FE90FD3D0893A028475557671 (old, revoked)

Because the Develocity Gradle plugin is still signed with the old key, you should trust both keys
rather than swapping one for the other — replacing the old key outright will break Develocity
injection. The documented snippet in
docs/setup-gradle.md
has been updated accordingly (#​1071):

<trusted-keys>
   <trusted-key id="7B79ADD11F8A779FE90FD3D0893A028475557671">
      <trusting group="com.gradle"/>
      <trusting group="org.gradle"/>
   </trusted-key>
   <trusted-key id="E2879931BCA1A42E55F2D64DD9B2DFBD9F3298BA">
      <trusting group="org.gradle"/>
   </trusted-key>
</trusted-keys>

cache-provider: external for externally managed Gradle User Home

Builds that save and restore Gradle User Home by some other mechanism (Develocity Artifact Cache, for
example) previously had to set cache-disabled: true, which was misleading: caching wasn't disabled,
it just wasn't managed by this action, and the Job Summary reported it as "Disabled".

cache-provider: external skips Gradle User Home restore/save exactly as cache-disabled does, but
reports a distinct External status in the Job Summary explaining that caching is handled by
another provider (#​1059).

- uses: gradle/actions/setup-gradle@v6
  with:
    cache-provider: 'external'

Develocity access keys containing OIDC tokens now work

Short-lived-token handling validated the server=key[;server=key]* access key format with a regex
whose key portion was too strict, so an access key holding an OIDC token value was rejected
outright. Worse, had it passed the regex, parsing split each entry on = and kept only the second
field — silently truncating any key containing = (as JWT padding does) and sending the mangled
key to the server. Both problems are fixed (#​1061).

Job Summary attribution

Job summaries produced by setup-gradle and dependency-submission now carry a top-level heading
naming the action, so the block stays attributable when another action's summary content lands in the
same job (#​1058).

Updated defaults

• GitHub Dependency Graph Gradle Plugin: 1.4.2 → 1.5.0
• 5 new known-good wrapper checksums for wrapper-validation (368 → 373 entries)

What's Changed

• Bump the github-actions group across 3 directories with 6 updates by @​dependabot[bot] in #​1039
• Bump the npm-dependencies group in /sources with 3 updates by @​dependabot[bot] in #​1038
• Add action heading to Gradle job summary by @​bigdaz in #​1058
• Add cache-provider: external to skip Gradle User Home caching by @​bigdaz in #​1059
• Relax Develocity access key format validation by @​bigdaz in #​1061
• Use the root-qualified :wrapper task by @​cobexer in #​1064
• Report EOL and maintenance status for Gradle versions by @​ov7a in #​1057
• Update dependencies by @​bigdaz in #​1065
• Update .tool-versions: node 24.18.0, gradle 9.7.1, java 17 by @​bigdaz in #​1068
• Combined automated updates: wrapper checksums, npm dependencies, setup-java by @​bigdaz in #​1070
• Bump dependency-graph-gradle-plugin to 1.5.0 by @​bigdaz in #​1069
• Document the new Gradle signing key for dependency verification by @​bigdaz in #​1071

New Contributors

• @​cobexer made their first contribution in #​1064
• @​ov7a made their first contribution in #​1057

Full Changelog: gradle/actions@v6.3.0...v6.4.0

lint-staged/lint-staged (lint-staged)

v17.6.0

Compare Source

Minor Changes

• #​1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  
  export default defineConfig({
    '*': {
      title: 'Fail if PDF files are committed',
      task: async (filepaths, { log }) => {
        const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
        if (pdfFiles.length > 0) {
          log('PDF files should not be committed: %s', pdfFiles)
          throw new Error('Failed')
        }
      },
    },
  })

• #​1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #​1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #​1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  
  export default defineConfig({
    '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #​1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #​1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Compare Source

Patch Changes

• #​1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

  A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

v17.5.0

Compare Source

Minor Changes

• #​1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

• #​1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

• #​1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

• #​1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

v17.4.1

Compare Source

Patch Changes

• #​1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

Netflix/dgs-codegen (com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core)

v8.7.0

What's Changed

• Strengthen lazy schema path test coverage (#​961) @​iuliiasobolevska, @​jiholee17

⭐ Improvements

• Support lazy file collections for GenerateJavaTask.schemaPaths (#​957) @​jiholee17

🔨 Dependency Upgrades

• Bump actions/checkout from 6 to 7 (#​946) @​dependabot[bot], @​iuliiasobolevska
• Bump actions/setup-python from 6.2.0 to 6.3.0 (#​948) @​dependabot[bot], @​iuliiasobolevska
• Bump actions/cache from 5 to 6 (#​949) @​dependabot[bot], @​iuliiasobolevska

mockito/mockito (org.mockito:mockito-junit-jupiter)

v5.24.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

5.24.0

• 2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
• Fix Mockito docs for -javaagent flag with Gradle (#​3866)
• Kotlin example for adding Mockito as an agent is incorrect (#​3864)
• Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#​3862)
• Bump gradle/actions from 6.2.0 to 6.3.0 (#​3852)
• Bump gradle/actions from 5 to 6.2.0 (#​3851)
• Preserve method parameters when clearing inline mocks (#​3847)
• Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#​3845)
• Print object fields via reflection when toString() is not implemented (#​3844)
• Migrate extensions-tests to JUnit Jupiter (#​3840)
• Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#​3839)
• docs(when-verify): fixes to explanations about redundancy (#​3838)
• Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#​3837)
• Bump actions/checkout from 6 to 7 (#​3836)
• Fixes #​2740 : Add mockMaker option to @Spy annotation (#​3835)
• Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#​3834)
• Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#​3833)
• Bump codecov/codecov-action from 6 to 7 (#​3831)
• Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#​3830)
• Fix clearInlineMocks not de-registering singleton mocks (#​3829)
• Fix NotAMockException when using mockSingleton with MockitoJUnit (#​3827)
• NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#​3826)
• Improve Gradle agent docs for configuration cache (#​3823)
• Gradle documentation for setting up instrumentation with Gradle configuration cache (#​3822)
• Fixes #​3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#​3819)
• Data race on invocationForPotentialStubbing (#​3818)
• Fixes #​3814 : implement package-level clinit suppression (#​3815)
• Package-level clinit suppression (#​3814)
• Upgrade Android Gradle Plugin to 8.13.2 (#​3812)
• Replaces raw generic types with type parameters (#​3806)
• Fixes #​2398 : Implement global suppress static initialization leveraging java agent (#​3801)
• Bump codecov/codecov-action from 5 to 6 (#​3800)
• Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#​3406, #​2823) (#​3795)
• Fixes #​3536 : Implement SpyStatic API (#​3794)
• The class's MethodParameters are removed after clearAllCaches is invoked (#​3763)
• [FeatureRequest / Idea] Create Mockito.spyStatic (#​3536)
• Add option to specify mockmaker for @Spy (#​2740)
• How can I suppress static initializer? (#​2398)

lysine-dev/okio (com.squareup.okio:okio)

v3.18.2

2026-09-04

• Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused
  base64 strings to be encoded without padding, even though the previous and expected behavior is
  to encode such strings with padding (= characters). The bug impacts callers who compiled
  against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

DataDog/datadog-api-client-java (com.datadoghq:datadog-api-client)

v2.61.0

Added

• Add bearer auth to endpoints that support api app key auth #​4362
• Document Deployment Gate evaluation APIs #​4361
• Update GCP V2 API spec to support is_org_folder_resource_collection_enabled #​4354
• allow billing read for ListQuotas GET endpoint #​4346
• Document run_as attribute and with_run_as param for downtime v2 API #​4340
• Add sensitivePrivileges field to Workflow Automation spec #​4334
• Add draft monitor permissions definition #​4333
• Document NDM device tag sources #​4325
• Document GetBudget response metadata #​4322
• LLMObs Document version-pinned prompt composition #​4316
• Add versioned prompt configuration #​4315
• Document OAuth v2 OIDC discovery endpoint #​4314
• Add prometheus remote write source and sink to obs-pipelines public api spec #​4310
• Allow up to three timeseries anomaly investigation results #​4309
• Security findings default and regular inbox rules API spec #​4307
• Add Integration Accounts v2 API for Snowflake #​4306
• Add downtime duration policy to Monitor Config Policy API spec #​4304
• Add overflow and metrics destinations, deprecate generate_datadog_metrics, add custom auth for http_client #​4303
• promote GET /api/v2/on-call/schedules to a public ListOnCallSchedules operation #​4302
• Add documentation for name filter query parameter in ListStatusPages #​4301
• Add embedded app widgets to the Dashboard API #​4297
• Support frontend annotation display blocks #​4296
• Accept the linear ticket creation target in security pipelines automation #​4295
• Add timeseries anomaly investigations API #​4287
• Add monitor IDs to deployment rules #​4285
• Change usage quotas public APIs to only required billing_edit #​4284
• Add sensitive_data and serverless_function_code_vulnerability to security finding notification API spec #​4283
• Add Integration Accounts v2 API for Databricks #​4279
• Add source to target and model configuration options to data quality monitors #​4276
• Publish product catalog SKUs and pricing API in preview #​4275
• Add unit cost ROI endpoints to Cloud Cost Management #​4274
• Update Observability Pipelines Splunk TCP source in OpenAPI spec #​4273
• Add annotated interaction details endpoint #​4267
• [DEM-68] - Publish DEM Journey APIs #​4265
• Add canceled_description to maintenance response attributes #​4263
• Add Feature Flag creation options #​4258
• Add workflow run as configuration #​4242
• Document NDM device tag sources #​4223
• Promote Code Coverage v2 endpoints to stable #​4195
• Document include_scopes query param on GET /api/v2/permissions #​4157

Removed

• Remove deprecated queried_tags_window_seconds and related_asset_tags fields #​4357
• Deprecate POST incidents /cases/page endpoint #​4347
• Remove actor_handle and actor_type from the CSM ownership feedback request #​4280

Fixed

• Fix static analysis OpenAPI drift #​4356
• Allow SDS configuration metadata extensions #​4353
• Fix cost recommendations JSON API request schema #​4341
• Add Private Action Runner flag to API key schemas #​4338
• Document monitor scope for investigations #​4311
• Fix static-analysis-api spec drift #​4299

Changed

• Normalize Twilio and Elastic Cloud integration account specs #​4332
• Use JSONAPI error schema for cost tag endpoints #​4328
• Fix GetBudget costs_unit.id type to integer #​4324
• Add role policy type to org group policies #​4277

Deprecated

• Deprecate OCI config listing endpoint #​4259

v2.60.0

Added

• Add opentelemetry metrics destination to observability pipelines public api spec #​4249
• Add incident and Slack reaction triggers to Workflow Automation #​4248
• Publish unstable STIX ingestion API #​4247
• [AGV-1597] Add is_iac support to send X-Datadog-Managed-By header #​4239
• Add warmup, fail_on_no_groups_found, and fail_on_no_data to Deployment Gates monitor rule options #​4238
• Add server.response.body.raw WAF address #​4224
• Fix estimate endpoint query params to match live schema #​4219
• Add zstd/compression to archive destinations #​4217
• Sync LLM Obs annotation access docs #​4212
• RUM - Make exclusion filter operations public #​4210
• Add OpenAPI docs for usage quotas admin #​4209
• API spec for severity modifiers automation pipelines #​4200
• Add bundle_config to Monitor Notification Rule #​4199
• Document RUM retention quota config API #​4198
• Add Integration Accounts v2 API for Twilio and Elastic Cloud #​4194
• Add endpoint_target field to Splunk HEC destination #​4193
• Add public Execution Policies endpoints #​4188
• Add OpenAPI spec for RUM Teams Ownership public API #​4183
• Add tags to Action Connection API spec #​4181
• Add Work Management note to Case Management API tag description #​4179
• Add OAuth support for v2 Logs queries #​4178
• Declare OAuth support for Events Search #​4176
• Add is_deleted query parameter to ListSLOs #​4148

Changed

• Promote usage quotas admin endpoints to public unstable #​4244
• AI Gateway - Fully type private beta control plane API #​4233
• Fix SCA OpenAPI drift #​4229
• Mark Data Deletion API as GA and update documentation #​4215
• Update CODEOWNERS to IDP pack #​4197
• Remove status_pa

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 8.53%. Comparing base (9a4625d) to head (30ff428).

Additional details and impacted files

@@            Coverage Diff             @@
##              main   #1147      +/-   ##
==========================================
- Coverage     9.59%   8.53%   -1.06%     
+ Complexity    2099    1666     -433     
==========================================
  Files         8645    8645              
  Lines        83245   83245              
  Branches       381     381              
==========================================
- Hits          7985    7108     -877     
- Misses       75065   75966     +901     
+ Partials       195     171      -24     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.