Merge branch 'open-feature:main' into kb-open-feature-java-sdk-contrib-mirror

Author: kushbatra

.github/component_owners.yml

@@ -35,6 +35,8 @@ components:
     - novalisdenahi
   providers/statsig:
     - liran2000
+  providers/optimizely:
+      - liran2000
   providers/multiprovider:
     - liran2000
   providers/ofrep-provider:

.release-please-manifest.json

@@ -1,7 +1,7 @@
 {
   "hooks/open-telemetry": "3.3.1",
-  "providers/flagd": "0.11.15",
-  "providers/go-feature-flag": "0.4.3",
+  "providers/flagd": "0.11.17",
+  "providers/go-feature-flag": "1.0.1",
   "providers/flagsmith": "0.0.12",
   "providers/env-var": "0.0.12",
   "providers/jsonlogic-eval-provider": "1.2.1",

hooks/open-telemetry/pom.xml

@@ -30,7 +30,7 @@
             <dependency>
                 <groupId>io.opentelemetry</groupId>
                 <artifactId>opentelemetry-bom</artifactId>
-                <version>1.54.0</version>
+                <version>1.54.1</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

mvnw

@@ -19,7 +19,7 @@
 # ----------------------------------------------------------------------------
 
 # ----------------------------------------------------------------------------
-# Apache Maven Wrapper startup batch script, version 3.3.3
+# Apache Maven Wrapper startup batch script, version 3.3.4
 #
 # Optional ENV vars
 # -----------------

mvnw.cmd

@@ -19,7 +19,7 @@
 @REM ----------------------------------------------------------------------------
 
 @REM ----------------------------------------------------------------------------
-@REM Apache Maven Wrapper startup batch script, version 3.3.3
+@REM Apache Maven Wrapper startup batch script, version 3.3.4
 @REM
 @REM Optional ENV vars
 @REM   MVNW_REPOURL - repo url base for downloading maven distribution

pom.xml

@@ -39,6 +39,7 @@
         <module>providers/flipt</module>
         <module>providers/configcat</module>
         <module>providers/statsig</module>
+        <module>providers/optimizely</module>
         <module>providers/multiprovider</module>
         <module>providers/ofrep</module>
         <module>tools/flagd-http-connector</module>
@@ -79,14 +80,14 @@
             <dependency>
                 <groupId>io.cucumber</groupId>
                 <artifactId>cucumber-bom</artifactId>
-                <version>7.28.2</version>
+                <version>7.29.0</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.mockito</groupId>
                 <artifactId>mockito-bom</artifactId>
-                <version>5.19.0</version>
+                <version>5.20.0</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -132,7 +133,7 @@
         <dependency>
             <groupId>org.assertj</groupId>
             <artifactId>assertj-core</artifactId>
-            <version>3.27.4</version>
+            <version>3.27.6</version>
             <scope>test</scope>
         </dependency>
 
@@ -222,7 +223,7 @@
             </plugin>
             <plugin>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.14.0</version>
+                <version>3.14.1</version>
             </plugin>
 
             <!-- automatically derive a module name from the groupId and artifactId -->
@@ -242,7 +243,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.5.3</version>
+                <version>3.5.4</version>
                 <configuration>
                     <excludes>
                         <!-- tests to exclude -->
@@ -304,14 +305,11 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-javadoc-plugin</artifactId>
-                        <version>3.11.3</version>
+                        <version>3.12.0</version>
                         <configuration>
                             <failOnWarnings>${javadoc.failOnWarnings}</failOnWarnings>
-                            <sourceFileExcludes>
-                                <sourceFileExclude>**/GoFeatureFlagProviderOptions.java</sourceFileExclude>
-                            </sourceFileExcludes>
                             <excludePackageNames>
-                                dev.openfeature.flagd.grpc,dev.openfeature.contrib.providers.gofeatureflag.exception,dev.openfeature.contrib.providers.gofeatureflag.bean
+                                dev.openfeature.flagd.grpc
                             </excludePackageNames>
                             <doclint>all,-missing
                             </doclint>  <!-- ignore missing javadoc, these are enforced with more customizability in the checkstyle plugin -->
@@ -378,7 +376,7 @@
                     <plugin>
                         <groupId>org.sonatype.central</groupId>
                         <artifactId>central-publishing-maven-plugin</artifactId>
-                        <version>0.8.0</version>
+                        <version>0.9.0</version>
                         <extensions>true</extensions>
                         <configuration>
                             <publishingServerId>central</publishingServerId>
@@ -417,7 +415,7 @@
                             <dependency>
                                 <groupId>com.puppycrawl.tools</groupId>
                                 <artifactId>checkstyle</artifactId>
-                                <version>11.0.1</version>
+                                <version>11.1.0</version>
                             </dependency>
                         </dependencies>
                         <executions>
@@ -487,7 +485,7 @@
                     <plugin>
                         <groupId>com.diffplug.spotless</groupId>
                         <artifactId>spotless-maven-plugin</artifactId>
-                        <version>2.46.1</version>
+                        <version>3.0.0</version>
                         <configuration>
                             <!-- optional: limit format enforcement to just the files changed by this feature branch -->
                             <!--                <ratchetFrom>origin/main</ratchetFrom>-->
@@ -563,15 +561,15 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-surefire-plugin</artifactId>
-                        <version>3.5.3</version>
+                        <version>3.5.4</version>
                         <configuration>
                             <skipTests>${skip.tests}</skipTests>
                         </configuration>
                     </plugin>
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-compiler-plugin</artifactId>
-                        <version>3.14.0</version>
+                        <version>3.14.1</version>
                         <executions>
                             <execution>
                                 <id>default-testCompile</id>

providers/flagd/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.11.17](https://github.com/open-feature/java-sdk-contrib/compare/dev.openfeature.contrib.providers.flagd-v0.11.16...dev.openfeature.contrib.providers.flagd-v0.11.17) (2025-10-15)
+
+
+### 🐛 Bug Fixes
+
+* **security:** force netty-codec-http2 4.1.125 ([#1615](https://github.com/open-feature/java-sdk-contrib/issues/1615)) ([0b0070c](https://github.com/open-feature/java-sdk-contrib/commit/0b0070cacf79dfd475fb3ce0c0dbdffd7e02fe8a))
+
+## [0.11.16](https://github.com/open-feature/java-sdk-contrib/compare/dev.openfeature.contrib.providers.flagd-v0.11.15...dev.openfeature.contrib.providers.flagd-v0.11.16) (2025-10-14)
+
+
+### 🐛 Bug Fixes
+
+* **flagd:** fix wrong environment variable and test execution ([#1589](https://github.com/open-feature/java-sdk-contrib/issues/1589)) ([e1d8e54](https://github.com/open-feature/java-sdk-contrib/commit/e1d8e54cb15f7e9f27626c60cebded3690a84698))
+* **flagd:** improve stream observer, refine retry policy; don't use retry to avoid busy loop ([#1590](https://github.com/open-feature/java-sdk-contrib/issues/1590)) ([791f38c](https://github.com/open-feature/java-sdk-contrib/commit/791f38cdcdb12f7d7c8ec457ecea968f1ec5d048))
+
 ## [0.11.15](https://github.com/open-feature/java-sdk-contrib/compare/dev.openfeature.contrib.providers.flagd-v0.11.14...dev.openfeature.contrib.providers.flagd-v0.11.15) (2025-09-05)
 
 

providers/flagd/README.md

@@ -8,7 +8,7 @@ This provider is designed to use flagd's [evaluation protocol](https://github.co
 <dependency>
   <groupId>dev.openfeature.contrib.providers</groupId>
   <artifactId>flagd</artifactId>
-  <version>0.11.15</version>
+  <version>0.11.17</version>
 </dependency>
 ```
 <!-- x-release-please-end-version -->

providers/flagd/pom.xml

@@ -11,12 +11,12 @@
     </parent>
     <groupId>dev.openfeature.contrib.providers</groupId>
     <artifactId>flagd</artifactId>
-    <version>0.11.15</version> <!--x-release-please-version -->
+    <version>0.11.17</version> <!--x-release-please-version -->
 
     <properties>
         <!-- exclusion expression for e2e tests -->
         <testExclusions>**/e2e/*.java</testExclusions>
-        <io.grpc.version>1.75.0</io.grpc.version>
+        <io.grpc.version>1.76.0</io.grpc.version>
         <!-- caution - updating this will break compatibility with older protobuf-java versions -->
         <protobuf-java.min.version>3.25.6</protobuf-java.min.version>
     </properties>
@@ -123,7 +123,7 @@
         <dependency>
             <groupId>io.opentelemetry</groupId>
             <artifactId>opentelemetry-api</artifactId>
-            <version>1.54.0</version>
+            <version>1.54.1</version>
         </dependency>
 
         <dependency>
@@ -180,6 +180,13 @@
                 <!-- caution - updating this will break compatibility with older protobuf-java versions -->
                 <version>${protobuf-java.min.version}</version>
             </dependency>
+
+            <!-- temporary override for https://www.cve.org/CVERecord?id=CVE-2025-58057 -->
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-codec-http2</artifactId>
+                <version>4.1.125.Final</version>
+            </dependency>
         </dependencies>
 
     </dependencyManagement>
@@ -198,7 +205,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>exec-maven-plugin</artifactId>
-                <version>3.5.1</version>
+                <version>3.6.0</version>
                 <executions>
                     <execution>
                         <id>update-schemas-submodule</id>
@@ -299,7 +306,7 @@
                     <plugin>
                         <groupId>org.codehaus.mojo</groupId>
                         <artifactId>exec-maven-plugin</artifactId>
-                        <version>3.5.1</version>
+                        <version>3.6.0</version>
                         <executions>
                             <execution>
                                 <id>update-test-harness-submodule</id>

providers/flagd/src/main/java/dev/openfeature/contrib/providers/flagd/Config.java

@@ -14,6 +14,7 @@ public final class Config {
     static final String DEFAULT_HOST = "localhost";
 
     static final int DEFAULT_DEADLINE = 500;
+    static final int DEFAULT_MAX_RETRY_BACKOFF_MS = 12000;
     static final int DEFAULT_STREAM_DEADLINE_MS = 10 * 60 * 1000;
     static final int DEFAULT_STREAM_RETRY_GRACE_PERIOD = 5;
     static final int DEFAULT_MAX_CACHE_SIZE = 1000;
@@ -29,12 +30,20 @@ public final class Config {
     static final String SERVER_CERT_PATH_ENV_VAR_NAME = "FLAGD_SERVER_CERT_PATH";
     static final String CACHE_ENV_VAR_NAME = "FLAGD_CACHE";
     static final String MAX_CACHE_SIZE_ENV_VAR_NAME = "FLAGD_MAX_CACHE_SIZE";
-    static final String MAX_EVENT_STREAM_RETRIES_ENV_VAR_NAME = "FLAGD_MAX_EVENT_STREAM_RETRIES";
     static final String BASE_EVENT_STREAM_RETRY_BACKOFF_MS_ENV_VAR_NAME = "FLAGD_RETRY_BACKOFF_MS";
     static final String DEADLINE_MS_ENV_VAR_NAME = "FLAGD_DEADLINE_MS";
+    static final String FLAGD_RETRY_BACKOFF_MAX_MS_VAR_NAME = "FLAGD_RETRY_BACKOFF_MAX_MS";
     static final String STREAM_DEADLINE_MS_ENV_VAR_NAME = "FLAGD_STREAM_DEADLINE_MS";
     static final String SOURCE_SELECTOR_ENV_VAR_NAME = "FLAGD_SOURCE_SELECTOR";
+    /**
+     * Environment variable to fetch Provider id.
+     *
+     * @deprecated please use {@link #PROVIDER_ID_ENV_VAR_NAME}
+     */
+    @Deprecated(forRemoval = true)
     static final String SOURCE_PROVIDER_ID_ENV_VAR_NAME = "FLAGD_SOURCE_PROVIDER_ID";
+
+    static final String PROVIDER_ID_ENV_VAR_NAME = "FLAGD_PROVIDER_ID";
     static final String OFFLINE_SOURCE_PATH = "FLAGD_OFFLINE_FLAG_SOURCE_PATH";
     static final String OFFLINE_POLL_MS = "FLAGD_OFFLINE_POLL_MS";
     static final String KEEP_ALIVE_MS_ENV_VAR_NAME_OLD = "FLAGD_KEEP_ALIVE_TIME";