Update dependency io.helidon:helidon-dependencies to v4.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.helidon:helidon-dependencies (source)	4.3.4 → 4.4.0

---

Release Notes

oracle/helidon (io.helidon:helidon-dependencies)

v4.4.0

Compare Source

This minor release of Helidon contains important bugfixes and enhancements and is recommended for all users of Helidon 4.
This release is API compatible with 4.3.

A minimum of Java 21 is required to use Helidon 4. Java 25 is recommended.

NEW FEATURES

Helidon 4.4.0 introduces new features including the following:

• LC4J 1.11.0 with Agentic (Preview)
• Helidon Declarative for WebClient, WebSocket, Health Checks, Telemetry, Metrics, CORS, Security (Preview)
• Helidon JSON: fast, compile time JSON (Incubating)
• Improved support for Open Telemetry
• Automatic AOT Cache creation when building jlink image with Java 25+

NOTABLE CHANGES

Tracing: Jaeger Exporter Deprecation

Helidon 4.4 upgrades OpenTelemetry to a version that no longer provides a Jaeger exporter. Therefore
Helidon's Jaeger tracing provider is now deprecated. Users are encouraged to switch to the
OpenTelemtry OTLP exporter. For more details see 11069.

LangChain4j Config Changes (Preview Feature)

The configuration for Helidon's LangChain4j support (preview feature) has changed. If you use this
feature you will need to update your configuration. For more information see Helidon's
LangChain4j documentation

CORS Configuration

CORS configuration has moved from feature specific section to a centralized top level configuration.
The feature level configuration is deprecated, but will continue to be supported in Helidon 4 for backwards compatability.

JSON Media Support

JSON Media Support has been enhanced and made consistent for JSON providers (Helidon JSON, Jackson, JSON-P, JSON-B):

• Providers can be configured with a custom Content-Type to set when not configured by the user
• Providers can be configured with a list of Content-Type values that will be accepted for reading
• Added validation against Accept header of the request, if the content type is not accepted, the media support will not provide a writer (only server writer)
• All providers now have application/json and application/json-patch+json as accepted types
• JSON-P continues to accept text/plain if read as a JsonObject
• Charset is now consistently processed if configured on the Content-Type. There may be changes as each support had slightly different implementation, now it is all consistent

New Blueprint Dependency

If you use Helidon’s Blueprint Prototype feature (via the Prototype.Configure API) then you now need
to add an optional compile time dependency on helidon-config-metadata for your generated blueprint code to compile.
We expect this case to be rare.

CHANGES

• Builders: Annotations properly generated with the Blueprint 11016
• Builders: Builder extensibility 10838
• Builders: Correctly discover parent configured blueprints even when from a different module 10985
• Builders: Default methods on blueprint now generate backward compatible prototypes. 11061
• Builders: Ensure that decorator methods for Set and List are called with correctly types values 11244
• Builders: Fix a problem where we kept bad candidates for builder methods. 10897
• Builders: Fix builder regression - generate singular setter with consumer of prototype builder 11252
• Builders: Generate service descriptors without deprecated code for annotations. 11183
• Builders: helidon-builder-processor as a shim of helidon-builder-codegen 11278
• Builders: Improve annotation processing diagnostics 11281
• Builders: Update builders to support third party types as runtime types. 11113
• Builders: Update documentation of classValue in Annotation 11228
• Codegen: Add support for enum and record types to class model. 11071
• Codegen: Codegen Unit Testing 11283
• Codegen: Fix addContentLiteral in content builder in class model 11249
• Codegen: Prettify class-model annotation rendering and support nested annotations 11282
• Common: Fix weight comparator. 11129
• Config: Changes in handling environment variables in SE config. 11049
• Config: Common config alternatives 11261
• Config: Create config from text and media type. 11138
• Config: File ConfigSource fails generating MD5 digest. 11233
• Config: Fix a bug in config expression resolution, where the : separating c… 11200
• Config: Fixes for Javadoc when building on Java 26 EA 11174
• Config: helidon-config-metadata-processor as a shim of helidon-config-metadata-codegen 11279
• Config: Log setup of configuration - filters, config sources, parsers etc. 11140
• Config: Merged config 11072
• Config: Meta config can now use config sources provided via service registry 10842
• Config: Move MP config encryption from SE module. 11097
• Config: Prevent recursion when getting global config in the deprecated way. 11171
• CORS: updated and declarative CORS 11155
• Data: Fix codegen to generate a for cycle instead of a for-each lambda 11203
• Declarative metrics. 10869
• Declarative security 10701
• Declarative tracing 10934
• Declarative Validation 10755
• Declarative WebSocket 11050
• Declarative: Fix handling of generic type for client response. 11300
• Declarative: Fix validation codegen to generate validation in order of declaration. 11142
• Declarative: WebSocket Client 11081
• Discovery: Web Client Discovery integration 10786
• FT: Terminate monitor thread created by the timeout implementation when supplier returns 10833
• gRPC: Fix "typo" in header name construction 10987
• gRPC: Fix problem handling server-side gRPC errors. Handles grpc-status hea… 10890
• gRPC: Update gRPC reflection service to support imports 11075
• JSON-RPC: Add support for SSE event sources to JsonRpcResponse 11031
• JSON: Compile-time JSON implementation 10961
• JSON: Helidon JSON media support for JsonValue subclasses. 11176
• JSON: Helidon JSON polymorphism support 11187
• JSON: Helidon JSON serialization loop fix 11218
• JSON: Insufficient number parsing fixed 11227
• JSON: Json API fixes 11286
• JSON: JSON generator fixes 11074
• JSON: Object deserialization fix 11236
• JSON: Remove incubating from Helidon JSON module 11219
• JSON: Use Helidon JSON instead of JSON-P for Config observer. 11264
• LC4J: Agentic 10972
• LC4J: Agentic MCP 11190
• LC4J: Add LangChain4j Mock ChatModel provider 10966
• LC4J: Add warning for incompatible langchain4j config keys 11287
• LC4J: documentation update. Bump version to 1.12.1 11275
• LC4J: Fix MockStreamingChatModel cofig root 11277
• LC4J: Support injection in guardrails #​10714 11024
• Media Support: Update of JSON media supports 11234
• Media: Add custom Gson type adapter factories during runtime 10437
• Media: Add support for buffering entities 11151
• Messaging: Add config-metadata support to JMS, AQ & Kafka connectors #​5227 10863
• MetaData: Fix loading of metadata when we have a split package 11170
• MetaData: Fixes a bug in metadata discovery, where we failed to call next() before remove() on iterator 11202
• Metrics: Improve handling and doc of baseUnit for Timer 10881
• Metrics: Improve Prometheus output performance 10850
• Metrics: Log warnings (if not configured to suppress) upon multiple instantiations of MMeterRegistry 10859
• Native-image: Changes for native image to work with GraalVM 25 for a simple application 10862
• OCI: Fully deprecate old OCI SE support 10899
• OpenAPI: Export package from OpenAPI UI integration module; with integration test 10902
• OpenAPI: Fix incorrect config examples and text for customizing UI settings in SE 10884
• OTel: Add support for exporting Helidon metrics via OTLP 11231
• OTel: Adopt later OpenTelemetry release 11066
• OTel: Allow and document how users control SE tracing for OpenTelemetry using Helidon config under tracing 10791
• OTel: Support OpenTelemetry logging set-up using Helidon configuration 11260
• Registry: Allow service registry injected ConfigSources to work in Helidon MP 11029
• Registry: If System.exit is called from post construct method, do not deadlock 11060
• Registry: Remove preview flag from service registry. 10907
• Registry: Set all contracts when calling Services.set 10816
• Scheduling: Add configurable enabled flag for scheduling tasks (#​10812) 10825
• Scheduling: Configurable MP Scheduling #​11004 11005
• Scheduling: Helidon SE Scheduling: Add ZoneId support in cron builder 11000
• Scheduling: Make sure we do not fail validation of scheduling in MP 10846
• Scheduling: Scheduling fixes 10837
• Security: Allow creation of ProviderRequest by changing it to an interface 11047
• Security: Backward compatible fix for common config in SecurityProviderService 11046
• SSE: Add support for content encoding in SSE 11273
• Telemetry: Add support for OpenTelemetry metrics configuration using Helidon config 11044
• Telemetry: Provide equivalent of OTel's Jaeger exporter for Helidon compatibility 11112
• Telemetry: Support OpenTelemetry metrics and tracing semantic conventions for web clients 11065
• Telemetry: Support OpenTelemetry server HTTP semantic conventions metrics 11168
• Testing: Fix testcontainers logging 11181
• Testing: Require CDI qualifier(s) to resolve JUnit method parameter from CDI 11247
• Tracing: Fix tracer factory to use a global tracer instead of a no-op tracer 11010
• WebClient: Add ConnectionListener interface to WebClient config to enable writing Proxy Protocol information 11179
• WebClient: Convert webclient OTel metrics sem. conv. to OTel API instead of Helidon metrics API 11172
• WebClient: Do not switch to chunked encoding in webclient when the length is known 10828
• WebClient: Remove duplicate Http/2 frame split in client #​10815 10829
• WebServer: Add support for extrracting TLV information from Proxy Protocol V2 11152
• WebServer: Deprecated public constructor of DataReader, replaced with static create method 10867
• WebServer: Do not use timeout on offering return of a connection to the pool. 10880
• WebServer: Expose TLS reload methods in MP #​10773 10841
• WebServer: Filters invoked twice when Http1DirectJunitExtension 11059
• WebServer: Fix issues with trailers in HTTP/2 10997
• WebServer: Fixed a case where we may return a negative number from an input stream in multipart. 10875
• WebServer: Fixed parsing of HTTP prologue for big endian machines 11051
• WebServer: HTTP/2 hasEntity() 10885
• WebServer: Prevent double compression when handler has already set content encoding 10887
• WebServer: Throughput rate limiting feature 10969
• WebServer: UNIX Domain Socket support 10894
• WebServer: Validate HTTP/2 MAX_FRAME_SIZE before applying client settings 11291
• Build: Attempt to fix intermittent compilation failures. 11165
• Build: bundles-apt added to the bom 11220
• Build: Fix dependency:analyze-only for http-media-json 11077
• Build: Fix issue when a maven build does compilation without clean. 11193
• Build: Fix schema location for pom files. 11006
• Build: Free disk space in tests job 10851
• Build: Make sure we have a plugin dependency for features codegen and codegen apt 10954
• Build: removes jaxb-impl from jpa-cdi/pom.xml 10898
• Build: Use a new profile long-tests for tests that use testcontainers 11132
• Dependencies: Bump com.oracle.oci.sdk:oci-java-sdk-bom from 3.77.2 to 3.78.1 in /dependencies 11067
• Dependencies: Bump-up LangChain4j to 1.10.0 10955
• Dependencies: Force upgrade jinjava to 2.8.3 11166
• Dependencies: Micronaut Data cannot build on Java 24 with the current MN versi… 10883
• Dependencies: Upgrade apache commons-text to 1.15.0 10976
• Dependencies: Upgrade build-tools to 4.0.25 11246
• Dependencies: Upgrade commons-logging to 1.3.5 11084
• Dependencies: Upgrade GSON to 2.13.2 11082
• Dependencies: Upgrade guava to 33.3.1-jre. Exclude some troublesome google artifacts from dep convergence 10839
• Dependencies: Upgrade Jackson to 2.21.0 11052
• Dependencies: Upgrade Jackson to 2.21.1 11239
• Dependencies: Upgrade Jersey to 3.1.11 10970
• Dependencies: Upgrade junit to 5.12.2 11177
• Dependencies: Upgrade Kafka client to 3.9.2 11207
• Dependencies: Upgrade log4j to 2.25.3 10518
• Dependencies: Upgrade Netty to 4.1.130.Final 10973
• Dependencies: Upgrade slf4j to 2.0.17 11083
• Dependencies: Upgrade test-containers to 1.21.4 11164
• Dependencies: Upgrades Byte Buddy to 1.18.5 11189
• Dependencies: Upgrades Narayana to 7.1.0.Final 10900
• Dependencies: Upgrades Oracle drivers to latest version 11271
• Dependencies: Upgrades version.lib.ojdbc to 23.26.0.0.0 10872
• Docs: Add reference to oci guide 11109
• Docs: Compile time json documentation 11055
• Docs: Config reference docs updates 11284
• Docs: Declarative security docs 10865
• Docs: Doc for using the OTel API directly from a Helidon app 11235
• Docs: Document support for service registry through Testing.Test annotation. 11243
• Docs: Exclude src/it from aggregated javadocs 11122
• Docs: Remove /#/ from helidon.io docs links 10960
• Docs: Remove MCP page and its reference in MP docs 11013
• Docs: Update docs to mention support for AOT Cache in custom jlink images 11226
• Docs: Update documentation with support for configuration expressions in scheduling 11169
• Docs: Update Helidon introduction page 11250
• Docs: Update LangChain4j docs for new provider/model config 11225
• Docs: Update OCI Integration documentation for SE 11032
• Docs: Update quick start (and related) documentation 11208
• Docs: Updates to SE and MP Upgrade Guides 11272
• Examples: Add OpenTelemetry as archetype tracing choice, make it default, remove Jaeger 11274
• Examples: Remove usage of Config.global in the archetypes 11162
• Tests: Accounts for Hibernate 6.6 and future versions' unique interpretation of an area of the JPA spec 11188
• Tests: Enable microprofile/tests/tck/tck-config/src/test/tck-suite.xml tests 8173
• Tests: Fix AckMPTest RC when delayed ack asks offset of the next message 10831
• Tests: Fix concurrent update problem in test log handler 10823
• Tests: Fix timeout duration in test 11040
• Tests: Isolate tests modules with -Ptests 11280
• Tests: Java 25 test fixes 11293
• Tests: Remove flaky HTTP/2 CutConnectionTest 11296
• Tests: Remove unused types from gson test. 10992
• Tests: Remove usage of local environment variables in test. 10878
• Tests: Tolerate test log tracing output that has attributes with no value 11085

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.