chore(main): release 1.89.0

[release-please]

🤖 I have created a release beep boop

1.89.0

1.89.0 (2026-07-29)

Features

• agentidentity: onboard v1 and v1beta API versions (#13796) (1b1300d)
• auth: add JSpecify Null annotations to Auth (#13842) (f6f24d4)
• bigquery-jdbc: add SSLTrustStoreType and SSLTrustStoreProvider connection properties (#13858) (9449be1)
• bigquery-jdbc: add otel trace and span IDs to local logs (#13935) (2801fbd)
• bigquery-jdbc: implement BigQueryParameterMetaData and dynamic type mappings (#13812) (3d67dba)
• bigquery-jdbc: implement parameter setters in PreparedStatement (#13792) (94f7404)
• bigquery-jdbc: Migrate getImportedKeys and getCrossReference to BQ API (#13692) (082b046)
• bigquery-jdbc: migrate getPrimaryKeys to use BQ API (#13691) (1951f49)
• bigquery-jdbc: OpenTelemetry integration in BQ JDBC (#12902) (af18f65)
• bigquery-jdbc: optimize memory footprint for JSON result set streaming (#13660) (11f26d3)
• bigquery-jdbc: standardize parameter handling and calendar defensive copying across statement interfaces (#13805) (ccd13eb)
• bigtable: add view_parameters support to BoundStatement (#13673) (d5cc437)
• bigtable: BigtableDataClientFactory session support (#13829) (284ce13)
• commerceproducer: onboard v1beta API (#13814) (61b89b3)
• Default to least-in-flight balancing for Bigtable unary clients (#13802) (ac9ccd1)
• firestore: Add support for 16MB documents (#13478) (1b7c2e0)
• gapic-generator: add JSpecify Null annotations to the generator classes (#13769) (843bd7c)
• gapic-generator: Add Nullable annotation to generated classes (#13558) (e3e9d0b)
• gapic-generator: Add NullMarked annotation to generated classes (#13584) (b7a8504)
• gax-httpjson: Add Post Quantum Cryptography (PQC) Support by default via Conscrypt (#13853) (550df81)
• gax-java: add JSpecify Null annotations to gax (#13799) (65aee08)
• google/cloud/sql: onboard a new library (#13864) (38e272e)
• google/maps/navconnect/v1: onboard a new library (#13927) (2256394)
• maps-isochrones: onboard v1 API (#13817) (3037ab3)
• port secure_context testing support to executor proxy (#13522) (0f81bf0)
• productregistry: onboard v1 API (#13816) (9517313)
• storage: allow checksum on appendable upload finalization (#13833) (ddf9add)
• storage: enable App-Centric Observability (ACO) support in Otel (#13248) (4329896)

Bug Fixes

• bigquery-jdbc: Add PerConnectionHandler to list of excempted logging classes (#13888) (50b3c24)
• bigquery-jdbc: add preferIPv4Stack to argLine for Kokoro reliability (#13923) (d5e33d6)
• bigquery-jdbc: add service resource transformer for standalone IT (#13893) (dc80fe8)
• bigquery-jdbc: align metadata methods error handling with spec (#13793) (d85fb10)
• bigquery-jdbc: fix WriteAPI when running in restricted environment (#13856) (66ba925)
• bigquery-jdbc: refine temporal timezone coercion and PreparedStatement parameter setters (#13813) (6f68c4d)
• bigquery-jdbc: resolve ITOpenTelemetryTest pipeline and trace validation failures (#13898) (c18141d)
• bigquery-jdbc: resolve failing otel IT in nightly (#13915) (ac79713)
• bigquery: resultSet.getLong() does not truncate for large int64 values (#13718) (bc19822)
• bigquery: support optional fields in BigLakeConfiguration to prevent NPE on Iceberg/Lakehouse tables (#13733) (e2cca4d)
• bigtable: add materialized view routing param to ReadRows and Sa… (#13918) (4ddf250)
• bigtable: bound SessionPoolImpl lock to prevent pod-wide wedge (#13890) (ed87a68)
• bigtable: fix session creation leaks (#13887) (d586d07)
• bigtable: prevent ClientConfigurationManagerTest from wedging on… (#13907) (725086d)
• bigtable: stop installing DirectpathEnforcer on the directpath pool (#13880) (5f2e056)
• bom: make release-note-generation Java 8 compatible (#13837) (bc18390)
• ci: fix java-cloud-bom release-notes workflow errors (#13682) (b679835)
• deprecate resource detector (#13844) (aba4f01)
• deps: align logback versions and add java8 profile in storage (#13678) (7e57092)
• do not start stream with direct executor (#13945) (630e790)
• fix java-cloud-bom README update workflow after monorepo migration (#13892) (5b8e295)
• oauth2_http: Avoid retrying on 4xx errors during GCE metadata ping (#13715) (537c16c)
• regenerate (#13714) (8a72860)
• regenerate libraries (#13703) (a29ea79), refs #13690
• release: handle missing release tags gracefully in release-note-generation (#13795) (43005fb)
• release: resolve first-party-dependencies SNAPSHOT in libraries-bom (#13790) (d5bfe21)
• spanner: avoid data race on DIRECTPATH_CHANNEL_CREATED by using volatile (#13727) (1e05ea5)
• spanner: prevent fastpath tablet routing flaps (#13803) (4dabdac)
• storage: BidiAppendableUpload Takeover operation fixes (#13776) (f2d0474)
• storage: correctly insert explicit nulls for json patch updates (#13716) (4fb3f4b)
• update group id mapping (#13698) (50a72e1)
• use a new managed channel builder when creating channels (#13684) (a049999)

Performance Improvements

• bigquery-jdbc: optimize getExportedKeys performance using hybrid metadata lookup (#13734) (c9738ea)

Dependencies

• Add Conscrypt to shared-deps (#13838) (05ce6ce)
• move conscrypt from third-party-dependencies POM to gax-java POM (#13948) (1e634ec)
• shared-deps: migrate awaitility to shared-dependencies (#13671) (abb91ef)
• shared-deps: switch conscrypt shared dependency to conscrypt-openjdk-uber (#13845) (2e3f208)
• Update gRPC-Java to v1.82.2 (#13877) (da228d8)
• Update http-client to v2.2.0 (#13854) (334a2c5)
• Update Protobuf-Java to v4.33.6 (#13876) (5c6478c)
• Upgrade Guava to v33.6.0-jre (#13875) (41a7a52)

Documentation

• add ErrorProne and NullAway integration guide and JSpecify migration playbook (#13882) (d5ea739)
• add JSpecify nullness guidelines to AGENTS.md (#13881) (54b846b)

---

This PR was generated with Release Please. See documentation.

[whowes]

/gcbrun

[blakeli0]

[ERROR] Require upper bound dependencies error for org.conscrypt:conscrypt-openjdk-uber:2.5.2 paths to dependency are:
2026-07-29T16:03:34.6493222Z 16:03:34:572 [ERROR] +-com.google.cloud:full-convergence-check:0.85.0
2026-07-29T16:03:34.6493397Z 16:03:34:572 [ERROR]   +-com.google.cloud:google-cloud-pubsublite:1.17.0
2026-07-29T16:03:34.6493556Z 16:03:34:572 [ERROR]     +-org.conscrypt:conscrypt-openjdk-uber:2.5.2
2026-07-29T16:03:34.6493641Z 16:03:34:572 [ERROR] and
2026-07-29T16:03:34.6493801Z 16:03:34:572 [ERROR] +-com.google.cloud:full-convergence-check:0.85.0
2026-07-29T16:03:34.6493984Z 16:03:34:572 [ERROR]   +-com.google.cloud:google-cloud-accessapproval:2.96.0
2026-07-29T16:03:34.6494312Z 16:03:34:572 [ERROR]     +-com.google.api:gax-httpjson:2.83.0 (managed) <-- com.google.api:gax-httpjson:2.83.0
2026-07-29T16:03:34.6494483Z 16:03:34:572 [ERROR]       +-org.conscrypt:conscrypt-openjdk-uber:2.6.0
2026-07-29T16:03:34.6494568Z 16:03:34:572 [ERROR] and
2026-07-29T16:03:34.6494718Z 16:03:34:572 [ERROR] +-com.google.cloud:full-convergence-check:0.85.0
2026-07-29T16:03:34.6494883Z 16:03:34:572 [ERROR]   +-com.google.cloud:google-cloud-bigtable:2.81.0
2026-07-29T16:03:34.6495087Z 16:03:34:572 [ERROR]     +-io.grpc:grpc-alts:1.82.2 (managed) <-- io.grpc:grpc-alts:1.82.2
2026-07-29T16:03:34.6495246Z 16:03:34:572 [ERROR]       +-org.conscrypt:conscrypt-openjdk-uber:2.5.2

We need to make sure the conscrypt version is aligned in all libraries. cc: @lqiu96

[lqiu96]

Checking the versions for Conscrypt

[sonarqubecloud]

Quality Gate passed for 'gapic-generator-java-root'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed for 'gapic-generator-java-root'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[blakeli0]

/gcbrun