fix(deps): bump the production-dependencies group across 1 directory with 12 updates #114

dependabot · 2025-03-25T08:16:08Z

Bumps the production-dependencies group with 12 updates in the / directory:

Package	From	To
@opentelemetry/auto-instrumentations-node	`0.56.1`	`0.57.0`
@opentelemetry/exporter-logs-otlp-proto	`0.57.2`	`0.200.0`
@opentelemetry/exporter-metrics-otlp-proto	`0.57.2`	`0.200.0`
@opentelemetry/exporter-trace-otlp-proto	`0.57.2`	`0.200.0`
@opentelemetry/instrumentation-kafkajs	`0.7.1`	`0.8.0`
@opentelemetry/resource-detector-container	`0.6.1`	`0.7.0`
@opentelemetry/resources	`1.30.1`	`2.0.0`
@opentelemetry/sdk-logs	`0.57.2`	`0.200.0`
@opentelemetry/sdk-metrics	`1.30.1`	`2.0.0`
@opentelemetry/sdk-node	`0.57.2`	`0.200.0`
@opentelemetry/sdk-trace-base	`1.30.1`	`2.0.0`
@opentelemetry/sdk-trace-node	`1.30.1`	`2.0.0`

Updates @opentelemetry/auto-instrumentations-node from 0.56.1 to 0.57.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.57.0

0.57.0 (2025-03-18)

⚠ BREAKING CHANGES

update to JS SDK 2.x (#2738)

Bug Fixes

deps: update otel core experimental to ^0.57.2 (#2716) (d2a9a20)

Miscellaneous Chores

update to JS SDK 2.x (#2738) (7fb4ba3)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.46.1 to ^0.47.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.50.3 to ^0.51.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.49.1 to ^0.50.0

@opentelemetry/instrumentation-bunyan bumped from ^0.45.1 to ^0.46.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.45.1 to ^0.46.0

@opentelemetry/instrumentation-connect bumped from ^0.43.1 to ^0.44.0

@opentelemetry/instrumentation-cucumber bumped from ^0.14.1 to ^0.15.0

@opentelemetry/instrumentation-dataloader bumped from ^0.16.1 to ^0.17.0

@opentelemetry/instrumentation-dns bumped from ^0.43.1 to ^0.44.0

@opentelemetry/instrumentation-express bumped from ^0.47.1 to ^0.48.0

@opentelemetry/instrumentation-fastify bumped from ^0.44.2 to ^0.45.0

@opentelemetry/instrumentation-fs bumped from ^0.19.1 to ^0.20.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.43.1 to ^0.44.0

@opentelemetry/instrumentation-graphql bumped from ^0.47.1 to ^0.48.0

@opentelemetry/instrumentation-hapi bumped from ^0.45.2 to ^0.46.0

@opentelemetry/instrumentation-ioredis bumped from ^0.47.1 to ^0.48.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.7.1 to ^0.8.0

@opentelemetry/instrumentation-knex bumped from ^0.44.1 to ^0.45.0

@opentelemetry/instrumentation-koa bumped from ^0.47.1 to ^0.48.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.44.1 to ^0.45.0

@opentelemetry/instrumentation-memcached bumped from ^0.43.1 to ^0.44.0

@opentelemetry/instrumentation-mongodb bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-mongoose bumped from ^0.46.1 to ^0.47.0

@opentelemetry/instrumentation-mysql bumped from ^0.45.1 to ^0.46.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.45.2 to ^0.46.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.44.1 to ^0.45.0

@opentelemetry/instrumentation-net bumped from ^0.43.1 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.51.1 to ^0.52.0

... (truncated)

Commits

32abc4c chore: release main (#2726)
7fb4ba3 chore!: update to JS SDK 2.x (#2738)
8e08755 test(instrumentation-aws-sdk): update devDeps to modern version of instrument...
4b51e60 fix(instrumentation-aws-lambda): Change endSpan error-logs for forceflush int...
b520d04 fix(instrumentation-pg): connection string parsing (#2715)
353dbb0 feat(instrumentation-express)!: propagate context and measure full handler sp...
b947650 chore(runtime-node): use mocha dep from monorepo package.json (#2731)
197ee04 ci: do not mark mongodb/mysql2 as unmaintained (#2733)
9e7e7ff test(instrumentation-winston): Include all versions in coverage (#2684)
675ec97 chore(deps): update dependency @types/mocha to v10 (#2717)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-proto from 0.57.2 to 0.200.0

Release notes

Sourced from @opentelemetry/exporter-logs-otlp-proto's releases.

experimental/v0.200.0

0.200.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only stable versions 2.0.0 are compatible with this release

💥 Breaking Change

feat(exporter-prometheus)!: stop the using type field to enforce naming conventions #5291 @chancancode

Any non-monotonic sums will now be treated as counters and will therefore include the _total suffix.

feat(shim-opencenus)!: stop mapping removed Instrument type to OpenTelemetry metrics #5291 @chancancode

The internal OpenTelemetry data model dropped the concept of instrument type on exported metrics, therefore mapping it is not necessary anymore.

feat(instrumentation-fetch)!: passthrough original response to applyCustomAttributes hook #5281 @chancancode

Previously, the fetch instrumentation code unconditionally clones every fetch() response in order to preserve the ability for the applyCustomAttributes hook to consume the response body. This is fundamentally unsound, as it forces the browser to buffer and retain the response body until it is fully received and read, which crates unnecessary memory pressure on large or long-running response streams. In extreme cases, this is effectively a memory leak and can cause the browser tab to crash. If your use case for applyCustomAttributes requires access to the response body, please chime in on #5293.

chore!: Raise the minimum supported Node.js version to ^18.19.0 || >=20.6.0. Support for Node.js 14, 16, and early minor versions of 18 and 20 have been dropped. This applies to all packages except the 'api' and 'semantic-conventions' packages. #5395 @trentm

feat(sdk-node)!: use IMetricReader over MetricReader #5311

(user-facing): NodeSDKConfiguration now provides the more general IMetricReader type over MetricReader

feat(exporter-metrics-otlp-http)!: do not read environment variables from window in browsers #5473 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

feat(sdk-logs)!: do not read environment variables from window in browsers #5472 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

🚀 (Enhancement)

feat(instrumentation-fetch): add a requestHook option #5380

feat(instrumentation): re-export initialize function from import-in-the-middle #5123

feat(sdk-node): lower diagnostic level #5360 @cjihrig

feat(exporter-prometheus): add additional attributes option #5317 @marius-a-mueller

Add withResourceConstantLabels option to ExporterConfig. It can be used to define a regex pattern to choose which resource attributes will be used as static labels on the metrics. The default is to not set any static labels.

🐛 (Bug Fix)

fix(instrumentation-grpc): monitor error events with events.errorMonitor #5369 @cjihrig

fix(exporter-metrics-otlp-http): browser OTLPMetricExporter was not passing config to OTLPMetricExporterBase super class #5331 @trentm

fix(instrumentation-fetch, instrumentation-xhr): Ignore network events with zero-timings #5332 @chancancode

fix(exporter-logs/trace-otlp-grpc): fix error for missing dependency otlp-exporter-base #5412 @JamieDanielson

🏠 (Internal)

chore(instrumentation-grpc): remove unused findIndex() function #5372 @cjihrig

refactor(otlp-exporter-base): remove unnecessary isNaN() checks #5374 @cjihrig

refactor(exporter-prometheus): remove unnecessary isNaN() check #5377 @cjihrig

... (truncated)

Changelog

Sourced from @opentelemetry/exporter-logs-otlp-proto's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

📚 Documentation

🏠 Internal

2.0.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only experimental versions 0.200.0 are compatible with this release

💥 Breaking Change

feat(sdk-trace-base)!: Add parentSpanContext and remove parentSpanId from Span and ReadableSpan #5450 @JacksonWeber

(user-facing): the SDK's Spans parentSpanId was replaced by parentSpanContext, to migrate to the new property, please replace span.parentSpanId -> span.parentSpanContext?.spanId

feat(sdk-metrics)!: drop deprecated type field on MetricDescriptor #5291 @chancancode

feat(sdk-metrics)!: drop deprecated InstrumentDescriptor type; use MetricDescriptor instead #5277 @chancancode

feat(sdk-metrics)!: bump minimum version of @opentelemetry/api peer dependency to 1.9.0 #5254 @chancancode

chore(shim-opentracing): replace deprecated SpanAttributes #4430 @JamieDanielson

chore(otel-core): replace deprecated SpanAttributes #4408 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

chore(otel-resources): replace deprecated SpanAttributes #4428 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

feat(sdk-metrics)!: replace attributeKeys with custom processors option #4532 @pichlermarc

... (truncated)

Commits

7fde940 chore: prepare release 2.0.0/0.200.0 (#5521)
ecd67de doc: add section to SDK 2.x migration guide for implementors of resource dete...
eaebf76 chore: prepare release 2.0.0-rc.1/0.200.0-rc.1 (#5534)
e947bd9 chore(deps): update dependency babel-loader to v10 (#5518)
5e20647 fix(deps): update dependency axios to v1.8.2 [security] (#5532)
78fc472 chore(deps): lock file maintenance (#5531)
693b09d fix(core): avoid using util in configuration.ts for browser compatibility (#5...
92fde6a chore: prepare 2.0.0-dev.1/0.200.0-dev.1 pre-release (#5512)
04b3210 doc: upgrade/migration guide for SDK 2.0 (#5513)
cb48266 fix(deps): update dependency import-in-the-middle to v1.13.1 (#5517)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-proto from 0.57.2 to 0.200.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-proto's releases.

experimental/v0.200.0

0.200.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only stable versions 2.0.0 are compatible with this release

💥 Breaking Change

feat(exporter-prometheus)!: stop the using type field to enforce naming conventions #5291 @chancancode

Any non-monotonic sums will now be treated as counters and will therefore include the _total suffix.

feat(shim-opencenus)!: stop mapping removed Instrument type to OpenTelemetry metrics #5291 @chancancode

The internal OpenTelemetry data model dropped the concept of instrument type on exported metrics, therefore mapping it is not necessary anymore.

feat(instrumentation-fetch)!: passthrough original response to applyCustomAttributes hook #5281 @chancancode

Previously, the fetch instrumentation code unconditionally clones every fetch() response in order to preserve the ability for the applyCustomAttributes hook to consume the response body. This is fundamentally unsound, as it forces the browser to buffer and retain the response body until it is fully received and read, which crates unnecessary memory pressure on large or long-running response streams. In extreme cases, this is effectively a memory leak and can cause the browser tab to crash. If your use case for applyCustomAttributes requires access to the response body, please chime in on #5293.

chore!: Raise the minimum supported Node.js version to ^18.19.0 || >=20.6.0. Support for Node.js 14, 16, and early minor versions of 18 and 20 have been dropped. This applies to all packages except the 'api' and 'semantic-conventions' packages. #5395 @trentm

feat(sdk-node)!: use IMetricReader over MetricReader #5311

(user-facing): NodeSDKConfiguration now provides the more general IMetricReader type over MetricReader

feat(exporter-metrics-otlp-http)!: do not read environment variables from window in browsers #5473 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

feat(sdk-logs)!: do not read environment variables from window in browsers #5472 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

🚀 (Enhancement)

feat(instrumentation-fetch): add a requestHook option #5380

feat(instrumentation): re-export initialize function from import-in-the-middle #5123

feat(sdk-node): lower diagnostic level #5360 @cjihrig

feat(exporter-prometheus): add additional attributes option #5317 @marius-a-mueller

Add withResourceConstantLabels option to ExporterConfig. It can be used to define a regex pattern to choose which resource attributes will be used as static labels on the metrics. The default is to not set any static labels.

🐛 (Bug Fix)

fix(instrumentation-grpc): monitor error events with events.errorMonitor #5369 @cjihrig

fix(exporter-metrics-otlp-http): browser OTLPMetricExporter was not passing config to OTLPMetricExporterBase super class #5331 @trentm

fix(instrumentation-fetch, instrumentation-xhr): Ignore network events with zero-timings #5332 @chancancode

fix(exporter-logs/trace-otlp-grpc): fix error for missing dependency otlp-exporter-base #5412 @JamieDanielson

🏠 (Internal)

chore(instrumentation-grpc): remove unused findIndex() function #5372 @cjihrig

refactor(otlp-exporter-base): remove unnecessary isNaN() checks #5374 @cjihrig

refactor(exporter-prometheus): remove unnecessary isNaN() check #5377 @cjihrig

... (truncated)

Changelog

Sourced from @opentelemetry/exporter-metrics-otlp-proto's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

📚 Documentation

🏠 Internal

2.0.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only experimental versions 0.200.0 are compatible with this release

💥 Breaking Change

feat(sdk-trace-base)!: Add parentSpanContext and remove parentSpanId from Span and ReadableSpan #5450 @JacksonWeber

(user-facing): the SDK's Spans parentSpanId was replaced by parentSpanContext, to migrate to the new property, please replace span.parentSpanId -> span.parentSpanContext?.spanId

feat(sdk-metrics)!: drop deprecated type field on MetricDescriptor #5291 @chancancode

feat(sdk-metrics)!: drop deprecated InstrumentDescriptor type; use MetricDescriptor instead #5277 @chancancode

feat(sdk-metrics)!: bump minimum version of @opentelemetry/api peer dependency to 1.9.0 #5254 @chancancode

chore(shim-opentracing): replace deprecated SpanAttributes #4430 @JamieDanielson

chore(otel-core): replace deprecated SpanAttributes #4408 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

chore(otel-resources): replace deprecated SpanAttributes #4428 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

feat(sdk-metrics)!: replace attributeKeys with custom processors option #4532 @pichlermarc

... (truncated)

Commits

7fde940 chore: prepare release 2.0.0/0.200.0 (#5521)
ecd67de doc: add section to SDK 2.x migration guide for implementors of resource dete...
eaebf76 chore: prepare release 2.0.0-rc.1/0.200.0-rc.1 (#5534)
e947bd9 chore(deps): update dependency babel-loader to v10 (#5518)
5e20647 fix(deps): update dependency axios to v1.8.2 [security] (#5532)
78fc472 chore(deps): lock file maintenance (#5531)
693b09d fix(core): avoid using util in configuration.ts for browser compatibility (#5...
92fde6a chore: prepare 2.0.0-dev.1/0.200.0-dev.1 pre-release (#5512)
04b3210 doc: upgrade/migration guide for SDK 2.0 (#5513)
cb48266 fix(deps): update dependency import-in-the-middle to v1.13.1 (#5517)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-proto from 0.57.2 to 0.200.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-proto's releases.

experimental/v0.200.0

0.200.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only stable versions 2.0.0 are compatible with this release

💥 Breaking Change

feat(exporter-prometheus)!: stop the using type field to enforce naming conventions #5291 @chancancode

Any non-monotonic sums will now be treated as counters and will therefore include the _total suffix.

feat(shim-opencenus)!: stop mapping removed Instrument type to OpenTelemetry metrics #5291 @chancancode

The internal OpenTelemetry data model dropped the concept of instrument type on exported metrics, therefore mapping it is not necessary anymore.

feat(instrumentation-fetch)!: passthrough original response to applyCustomAttributes hook #5281 @chancancode

Previously, the fetch instrumentation code unconditionally clones every fetch() response in order to preserve the ability for the applyCustomAttributes hook to consume the response body. This is fundamentally unsound, as it forces the browser to buffer and retain the response body until it is fully received and read, which crates unnecessary memory pressure on large or long-running response streams. In extreme cases, this is effectively a memory leak and can cause the browser tab to crash. If your use case for applyCustomAttributes requires access to the response body, please chime in on #5293.

chore!: Raise the minimum supported Node.js version to ^18.19.0 || >=20.6.0. Support for Node.js 14, 16, and early minor versions of 18 and 20 have been dropped. This applies to all packages except the 'api' and 'semantic-conventions' packages. #5395 @trentm

feat(sdk-node)!: use IMetricReader over MetricReader #5311

(user-facing): NodeSDKConfiguration now provides the more general IMetricReader type over MetricReader

feat(exporter-metrics-otlp-http)!: do not read environment variables from window in browsers #5473 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

feat(sdk-logs)!: do not read environment variables from window in browsers #5472 @pichlermarc

(user-facing): all configuration previously possible via window.OTEL_* is now not supported anymore, please pass configuration options to constructors instead.

Note: Node.js environment variable configuration continues to work as-is.

🚀 (Enhancement)

feat(instrumentation-fetch): add a requestHook option #5380

feat(instrumentation): re-export initialize function from import-in-the-middle #5123

feat(sdk-node): lower diagnostic level #5360 @cjihrig

feat(exporter-prometheus): add additional attributes option #5317 @marius-a-mueller

Add withResourceConstantLabels option to ExporterConfig. It can be used to define a regex pattern to choose which resource attributes will be used as static labels on the metrics. The default is to not set any static labels.

🐛 (Bug Fix)

fix(instrumentation-grpc): monitor error events with events.errorMonitor #5369 @cjihrig

fix(exporter-metrics-otlp-http): browser OTLPMetricExporter was not passing config to OTLPMetricExporterBase super class #5331 @trentm

fix(instrumentation-fetch, instrumentation-xhr): Ignore network events with zero-timings #5332 @chancancode

fix(exporter-logs/trace-otlp-grpc): fix error for missing dependency otlp-exporter-base #5412 @JamieDanielson

🏠 (Internal)

chore(instrumentation-grpc): remove unused findIndex() function #5372 @cjihrig

refactor(otlp-exporter-base): remove unnecessary isNaN() checks #5374 @cjihrig

refactor(exporter-prometheus): remove unnecessary isNaN() check #5377 @cjihrig

... (truncated)

Changelog

Sourced from @opentelemetry/exporter-trace-otlp-proto's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

📚 Documentation

🏠 Internal

2.0.0

Summary

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

The public interface has changed

for notes on migrating to 2.x / 0.200.x see the upgrade guide

Only experimental versions 0.200.0 are compatible with this release

💥 Breaking Change

feat(sdk-trace-base)!: Add parentSpanContext and remove parentSpanId from Span and ReadableSpan #5450 @JacksonWeber

(user-facing): the SDK's Spans parentSpanId was replaced by parentSpanContext, to migrate to the new property, please replace span.parentSpanId -> span.parentSpanContext?.spanId

feat(sdk-metrics)!: drop deprecated type field on MetricDescriptor #5291 @chancancode

feat(sdk-metrics)!: drop deprecated InstrumentDescriptor type; use MetricDescriptor instead #5277 @chancancode

feat(sdk-metrics)!: bump minimum version of @opentelemetry/api peer dependency to 1.9.0 #5254 @chancancode

chore(shim-opentracing): replace deprecated SpanAttributes #4430 @JamieDanielson

chore(otel-core): replace deprecated SpanAttributes #4408 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

chore(otel-resources): replace deprecated SpanAttributes #4428 @JamieDanielson

feat(sdk-metrics)!: remove MeterProvider.addMetricReader() in favor of constructor option #4419 @pichlermarc

feat(sdk-metrics)!: replace attributeKeys with custom processors option #4532 @pichlermarc

... (truncated)

Commits

7fde940 chore: prepare release 2.0.0/0.200.0 (#5521)
ecd67de doc: add section to SDK 2.x migration guide for implementors of resource dete...
eaebf76 chore: prepare release 2.0.0-rc.1/0.200.0-rc.1 (#5534)
e947bd9 chore(deps): update dependency babel-loader to v10 (#5518)
5e20647 fix(deps): update dependency axios to v1.8.2 [security] (#5532)
78fc472 chore(deps): lock file maintenance (#5531)
693b09d fix(core): avoid using util in configuration.ts for browser compatibility (#5...
92fde6a chore: prepare 2.0.0-dev.1/0.200.0-dev.1 pre-release (#5512)
04b3210 doc: upgrade/migration guide for SDK 2.0 (#5513)
cb48266 fix(deps): update dependency import-in-the-middle to v1.13.1 (#5517)
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-kafkajs from 0.7.1 to 0.8.0

Release notes

Sourced from @opentelemetry/instrumentation-kafkajs's releases.

instrumentation-kafkajs: v0.8.0

0.8.0 (2025-03-18)

⚠ BREAKING CHANGES

chore!: Update to 2.x and 0.200.x @opentelemetry/* packages from opentelemetry-js.git per 2.x upgrade guide

The minimum supported Node.js has been raised to ^18.19.0 || >=20.6.0. This means that support for Node.js 14 and 16 has been dropped.

The minimum supported TypeScript version has been raised to 5.0.4.

The compilation target for transpiled TypeScript has been raised to ES2022 (from ES2017).

Bug Fixes

deps: update otel core experimental to ^0.57.2 (#2716) (d2a9a20)

Miscellaneous Chores

update to JS SDK 2.x (#2738) (7fb4ba3)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.45.1 to ^0.46.0

Changelog

Sourced from @opentelemetry/instrumentation-kafkajs's changelog.

0.8.0 (@opentelemetry/propagator-grpc-census-binary)

🚀 (Enhancement)

#39 feat: add gRPC Census propagator (@nkelly75)

Committers: 1

Niall Kelly (@nkelly75)

0.8.0

Released 2020-05-29

🚀 (Enhancement)

#30 Support OpenTelemetry SDK 0.8.x (@dyladan)

opentelemetry-plugin-mongodb

#34 Enhanced Database Reporting for MongoDB (@romil-punetha)

opentelemetry-plugin-ioredis

#33 feat(opentelemetry-plugin-ioredis): provide a custom serializer fn for db.statement (@marcoreni)

Committers: 3

Marco Reni (@marcoreni)

Romil Punetha (@romil-punetha)

Daniel Dyla (@dyladan)

0.7.0

Released 2020-04-27

🐛 (Bug Fix)

opentelemetry-plugin-express

#910 fix(plugin-express): fix double span end #908 (@vmarchaud)

opentelemetry-plugin-mongodb

#5 fix(mongodb): avoid double patching when enable is called twice (@vmarchaud)

opentelemetry-plugin-mongodb

#3 Prevent double wrapping pg pool query (@dyladan)

🚀 (Enhancement)

opentelemetry-plugin-express

#914 feat: add express to default list of instrumented plugins (@mayurkale22)

Committers: 3

Valentin Marchaud (@vmarchaud)

Mayur Kale (@mayurkale22)

Daniel Dyla (@dyladan)

0.6.1

Released 2020-04-08

For details about this release and all previous releases, see https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md

Commits

e4cd257 Merge pull request #40 from dynatrace-oss-contrib/0.8.0-proposal
5570473 chore: bump package.json
0d541c0 chore: update version.ts files
b5046bd chore: 0.8.0 release proposal
e47397f Merge pull request #30 from dynatrace-oss-contrib/bump-8
48327d7 chore: disable context after all tests
c04ed24 chore: ensure context is disabled after each pg test

socket-security · 2025-03-25T08:16:47Z

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@opentelemetry/[email protected] ➜ 0.57.0	Transitive: filesystem, network, unsafe	`+91`	14.6 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.200.0	Transitive: environment, unsafe	`+5`	15 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.200.0	Transitive: environment, unsafe	`+6`	15.1 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.200.0	Transitive: environment, unsafe	`+5`	15 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.8.0	Transitive: environment, filesystem, unsafe	`+19`	8.91 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.7.0	Transitive: environment, unsafe	`+2`	7.72 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 2.0.0	Transitive: unsafe	`+2`	8.05 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.200.0	Transitive: environment, unsafe	`+3`	8.25 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 2.0.0	Transitive: environment, unsafe	`+2`	9.55 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 0.200.0	Transitive: filesystem, network, unsafe	`+33`	17.7 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 2.0.0	Transitive: environment, unsafe	`+2`	8.38 MB	dyladan
npm/@opentelemetry/[email protected] ➜ 2.0.0	Transitive: environment, unsafe	`+3`	7.75 MB	dyladan
npm/[email protected]	None	`0`	96.7 kB	npm-cli-ops
npm/[email protected]	environment, eval	`+8`	3.03 MB	mrgnrdrck
npm/[email protected]	Transitive: environment, filesystem, shell	`+6`	27.1 MB	shaberman
npm/[email protected]	None	`0`	435 kB	sindresorhus
npm/[email protected]	Transitive: environment, filesystem	`+44`	5.45 MB	jameshenry
npm/[email protected] ➜ 5.8.2	None	`0`	22.9 MB	typescript-bot

🚮 Removed packages: npm/@types/[email protected], npm/@types/[email protected], npm/[email protected]

View full report↗︎

…with 12 updates Bumps the production-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.56.1` | `0.57.0` | | [@opentelemetry/exporter-logs-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.57.2` | `0.200.0` | | [@opentelemetry/exporter-metrics-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.57.2` | `0.200.0` | | [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.57.2` | `0.200.0` | | [@opentelemetry/instrumentation-kafkajs](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.7.1` | `0.8.0` | | [@opentelemetry/resource-detector-container](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.6.1` | `0.7.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.0.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.57.2` | `0.200.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.0.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.57.2` | `0.200.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.0.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.0.0` | Updates `@opentelemetry/auto-instrumentations-node` from 0.56.1 to 0.57.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@auto-instrumentations-node-v0.56.1...auto-instrumentations-node-v0.57.0) Updates `@opentelemetry/exporter-logs-otlp-proto` from 0.57.2 to 0.200.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.2...experimental/v0.200.0) Updates `@opentelemetry/exporter-metrics-otlp-proto` from 0.57.2 to 0.200.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.2...experimental/v0.200.0) Updates `@opentelemetry/exporter-trace-otlp-proto` from 0.57.2 to 0.200.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.2...experimental/v0.200.0) Updates `@opentelemetry/instrumentation-kafkajs` from 0.7.1 to 0.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@instrumentation-fs-v0.7.1...v0.8.0) Updates `@opentelemetry/resource-detector-container` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@v0.6.1...v0.7.0) Updates `@opentelemetry/resources` from 1.30.1 to 2.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.0.0) Updates `@opentelemetry/sdk-logs` from 0.57.2 to 0.200.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.2...experimental/v0.200.0) Updates `@opentelemetry/sdk-metrics` from 1.30.1 to 2.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.0.0) Updates `@opentelemetry/sdk-node` from 0.57.2 to 0.200.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.2...experimental/v0.200.0) Updates `@opentelemetry/sdk-trace-base` from 1.30.1 to 2.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.0.0) Updates `@opentelemetry/sdk-trace-node` from 1.30.1 to 2.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.0.0) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-logs-otlp-proto" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-proto" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-proto" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/instrumentation-kafkajs" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resource-detector-container" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-logs" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-base" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-04-01T07:08:21Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

basti1302 · 2025-04-25T06:41:22Z

superseded by #118 118

dependabot · 2025-04-25T06:41:24Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 25, 2025

dependabot bot requested a review from a team as a code owner March 25, 2025 08:16

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-b9e529b1a5 branch from 87ff68f to 997ec08 Compare April 1, 2025 07:03

basti1302 closed this Apr 25, 2025

dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-b9e529b1a5 branch April 25, 2025 06:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): bump the production-dependencies group across 1 directory with 12 updates #114

fix(deps): bump the production-dependencies group across 1 directory with 12 updates #114

Uh oh!

dependabot bot commented on behalf of github Mar 25, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Mar 25, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Apr 1, 2025

Uh oh!

basti1302 commented Apr 25, 2025

Uh oh!

dependabot bot commented on behalf of github Apr 25, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix(deps): bump the production-dependencies group across 1 directory with 12 updates #114

fix(deps): bump the production-dependencies group across 1 directory with 12 updates #114

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

auto-instrumentations-node: v0.57.0

0.57.0 (2025-03-18)

⚠ BREAKING CHANGES

Bug Fixes

Miscellaneous Chores

Dependencies

experimental/v0.200.0

0.200.0

Summary

💥 Breaking Change

🚀 (Enhancement)

🐛 (Bug Fix)

🏠 (Internal)

CHANGELOG

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.0.0

Summary

💥 Breaking Change

experimental/v0.200.0

0.200.0

Summary

💥 Breaking Change

🚀 (Enhancement)

🐛 (Bug Fix)

🏠 (Internal)

CHANGELOG

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.0.0

Summary

💥 Breaking Change

experimental/v0.200.0

0.200.0

Summary

💥 Breaking Change

🚀 (Enhancement)

🐛 (Bug Fix)

🏠 (Internal)

CHANGELOG

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.0.0

Summary

💥 Breaking Change

instrumentation-kafkajs: v0.8.0

0.8.0 (2025-03-18)

⚠ BREAKING CHANGES

Bug Fixes

Miscellaneous Chores

Dependencies

0.8.0 (@opentelemetry/propagator-grpc-census-binary)

🚀 (Enhancement)

Committers: 1

0.8.0

🚀 (Enhancement)

Committers: 3

0.7.0

🐛 (Bug Fix)

🚀 (Enhancement)

Committers: 3

0.6.1

dependabot bot commented on behalf of github Mar 25, 2025 •

edited

Loading

0.8.0 (`@opentelemetry/propagator-grpc-census-binary`)

socket-security bot commented Mar 25, 2025 •

edited

Loading