[PF-2983]: Bump the minor-patch-dependencies group with 7 updates (#217)

* [PF-2983]: Bump the minor-patch-dependencies group with 7 updates

Bumps the minor-patch-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.79` | `1.80` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.52.0` | `26.53.0` |
| bio.terra:stairway-gcp | `1.1.17-SNAPSHOT` | `1.1.18-SNAPSHOT` |
| bio.terra:stairway-azure | `1.1.17-SNAPSHOT` | `1.1.18-SNAPSHOT` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.9.0-alpha` | `2.12.0-alpha` |
| com.github.ben-manes.versions | `0.51.0` | `0.52.0` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.4.1` | `3.4.2` |


Updates `org.bouncycastle:bcprov-jdk18on` from 1.79 to 1.80
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.cloud:libraries-bom` from 26.52.0 to 26.53.0
- [Release notes](https://github.com/googleapis/java-cloud-bom/releases)
- [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json)
- [Commits](googleapis/java-cloud-bom@v26.52.0...v26.53.0)

Updates `bio.terra:stairway-gcp` from 1.1.17-SNAPSHOT to 1.1.18-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.17-SNAPSHOT to 1.1.18-SNAPSHOT

Updates `bio.terra:stairway-azure` from 1.1.17-SNAPSHOT to 1.1.18-SNAPSHOT

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.9.0-alpha to 2.12.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `com.github.ben-manes.versions` from 0.51.0 to 0.52.0

Updates `org.springframework.boot` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud:libraries-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-gcp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bio.terra:stairway-azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.github.ben-manes.versions
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* update upload-artifact to v4

* update comments about spring boot and opentelemetry versions

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: LizBaldo <baldo@broadinstitute.org>
Co-authored-by: M. Morgan Aster <marymorg@broadinstitute.org>

Author: 3 people

build.gradle

@@ -5,11 +5,12 @@ plugins {
     id 'maven-publish'
 
     id 'com.diffplug.spotless' version '7.0.2'
-    id 'com.github.ben-manes.versions' version '0.51.0'
+    id 'com.github.ben-manes.versions' version '0.52.0'
     id 'com.jfrog.artifactory' version '5.2.5'
     id 'org.sonarqube' version '6.0.1.5171'
     id 'io.spring.dependency-management' version '1.1.7'
-    id 'org.springframework.boot' version '3.4.1'
+    // when updating spring boot version, check whether any changes are needed in the opentelemetry-bom version below
+    id 'org.springframework.boot' version '3.4.2'
     id 'com.srcclr.gradle' version '3.1.12'
 }
 
@@ -54,7 +55,7 @@ dependencies {
     // Misc. Services
     implementation group: 'io.kubernetes', name: 'client-java', version: '22.0.0-legacy'
     constraints {
-        implementation('org.bouncycastle:bcprov-jdk18on:1.79') {
+        implementation('org.bouncycastle:bcprov-jdk18on:1.80') {
             because 'https://broadworkbench.atlassian.net/browse/DCJ-275'
         }
     }
@@ -63,7 +64,7 @@ dependencies {
 
     // Google dependencies
     // use common bom
-    implementation platform('com.google.cloud:libraries-bom:26.52.0')
+    implementation platform('com.google.cloud:libraries-bom:26.53.0')
     implementation group: 'com.google.cloud', name: 'google-cloud-core'
     implementation group: 'com.google.cloud', name: 'google-cloud-pubsub'
     api group: 'com.google.guava', name: 'guava'
@@ -74,7 +75,7 @@ dependencies {
 
     // Terra libraries
     implementation group: 'org.broadinstitute.dsde.workbench', name: 'sam-client_2.13', version: 'v0.0.329'
-    var stairwayVersion= '1.1.17-SNAPSHOT'
+    var stairwayVersion= '1.1.18-SNAPSHOT'
     api "bio.terra:stairway-gcp:${stairwayVersion}"
     implementation "bio.terra:stairway-azure:${stairwayVersion}"
 
@@ -84,10 +85,10 @@ dependencies {
     implementation group: 'ch.qos.logback.contrib', name: 'logback-jackson', version: '0.1.5'
 
     // OpenTelemetry dependencies:
-    // Spring Boot 3.4.0 pulls in opentelemetry-bom 1.43.0.
-    // We choose opentelemetry-instrumentation-bom-alpha:2.9.0-alpha because otel-instrumentation 2.9.0 targets otel 1.43.0.
+    // Spring Boot 3.4.2 pulls in opentelemetry-bom 1.43.0.
+    // Note that opentelemetry-instrumentation-bom-alpha:2.12.0-alpha targets opentelemetry 1.46.0.
     // When upgrading Spring Boot, re-check these versions.
-    implementation platform("io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha:2.9.0-alpha")
+    implementation platform("io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha:2.12.0-alpha")
     // ... versioned by Spring Boot
     api 'io.opentelemetry:opentelemetry-api'
     implementation 'io.opentelemetry:opentelemetry-exporter-logging'