sdk pins micrometer-core to 1.9.9 via the micrometer BOM ( we pin to the lowest supported version ([1.0.0,)) so we don't force users onto Kotlin 1.6, which micrometer 1.10.x requires) Users can safely override upward in their own builds.
flagged CVE (CVE-2026-40984, DoS)
Request to fix upstream
sdk pins micrometer-core to 1.9.9 via the micrometer BOM ( we pin to the lowest supported version ([1.0.0,)) so we don't force users onto Kotlin 1.6, which micrometer 1.10.x requires) Users can safely override upward in their own builds.
flagged CVE (CVE-2026-40984, DoS)
Request to fix upstream