fix(deps): bump the production-dependencies group with 13 updates #126

dependabot · 2025-05-20T07:18:03Z

Bumps the production-dependencies group with 13 updates:

Package	From	To
@opentelemetry/auto-instrumentations-node	`0.58.1`	`0.59.0`
@opentelemetry/core	`2.0.0`	`2.0.1`
@opentelemetry/exporter-logs-otlp-proto	`0.200.0`	`0.201.1`
@opentelemetry/exporter-metrics-otlp-proto	`0.200.0`	`0.201.1`
@opentelemetry/exporter-trace-otlp-proto	`0.200.0`	`0.201.1`
@opentelemetry/instrumentation-kafkajs	`0.9.2`	`0.10.0`
@opentelemetry/resource-detector-container	`0.7.0`	`0.7.1`
@opentelemetry/resources	`2.0.0`	`2.0.1`
@opentelemetry/sdk-logs	`0.200.0`	`0.201.1`
@opentelemetry/sdk-metrics	`2.0.0`	`2.0.1`
@opentelemetry/sdk-node	`0.200.0`	`0.201.1`
@opentelemetry/sdk-trace-base	`2.0.0`	`2.0.1`
@opentelemetry/sdk-trace-node	`2.0.0`	`2.0.1`

Updates @opentelemetry/auto-instrumentations-node from 0.58.1 to 0.59.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.59.0

0.59.0 (2025-05-15)

Features

deps: update deps matching '@opentelemetry/*' (#2828) (59c2a4c)

oracledb: Add support for Oracle DB instrumentation (#2612) (e8e3cbd)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.51.1 to ^0.52.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-bunyan bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-connect bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-cucumber bumped from ^0.15.0 to ^0.16.0

@opentelemetry/instrumentation-dataloader bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-dns bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-express bumped from ^0.49.0 to ^0.50.0

@opentelemetry/instrumentation-fastify bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-fs bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-graphql bumped from ^0.48.0 to ^0.49.0

@opentelemetry/instrumentation-hapi bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-ioredis bumped from ^0.48.0 to ^0.49.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.9.2 to ^0.10.0

@opentelemetry/instrumentation-knex bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-koa bumped from ^0.48.0 to ^0.49.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-memcached bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-mongodb bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-mongoose bumped from ^0.47.1 to ^0.48.0

@opentelemetry/instrumentation-mysql bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-net bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-oracledb bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-pg bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-pino bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-redis bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-redis-4 bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-restify bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-router bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.14.0 to ^0.15.0

@opentelemetry/instrumentation-socket.io bumped from ^0.47.0 to ^0.48.0

... (truncated)

Commits

393b515 chore: release main (#2817)
59c2a4c feat(deps): update deps matching '@opentelemetry/*' (#2828)
64fcbf3 feat(instrumentation-aws-sdk): add gen ai metrics for bedrock (#2771)
ddf9bd5 refactor(examples): update semconv usage to ATTR_ exports (#2819)
e0d2cb2 feat(opentelemetry-sampler-aws-xray): Update Rules Poller Implementation (#2750)
27f5c66 docs: display the component-owner role more prominently in README.md (#2800)
f6bc4cc fix(pg): fix instrumentation of ESM-imported pg-pool (#2807)
e8e3cbd feat(oracledb): Add support for Oracle DB instrumentation (#2612)
10da4db test(auto-instrumentations-node): fix spurious test timeout from variable run...
See full diff in compare view

Updates @opentelemetry/core from 2.0.0 to 2.0.1

Release notes

Sourced from @opentelemetry/core's releases.

v2.0.1

2.0.1

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

fix(resource): use dynamic import over require to improve ESM compliance #5298 @xiaoxiangmoe

📚 Documentation

refactor(metrics): Updated metrics samples to no longer treat sdk.start() as async #5617 @JacksonWeber

🏠 Internal

refactor(sdk-trace-base): update semconv usage to ATTR_ exports #5669 @trentm

refactor(sdk-trace-web): update semconv usage to ATTR_ exports #5672 @trentm

refactor(resources): update semconv usage to ATTR_ exports #5666 @trentm

test(sdk-metrics): fix multiple problematic assertRejects() calls #5611 @cjihrig

refactor: replace assertRejects() with assert.rejects() #5614 @cjihrig

refactor(core): migrate from deprecated semconv constants #5575 @alumni55748

refactor(opentelemetry-core): simplify parseKeyPairsIntoRecord() #5610 @cjihrig

Changelog

Sourced from @opentelemetry/core's changelog.

2.0.1

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

fix(resource): use dynamic import over require to improve ESM compliance #5298 @xiaoxiangmoe

📚 Documentation

refactor(metrics): Updated metrics samples to no longer treat sdk.start() as async #5617 @JacksonWeber

🏠 Internal

refactor(sdk-trace-base): update semconv usage to ATTR_ exports #5669 @trentm

refactor(sdk-trace-web): update semconv usage to ATTR_ exports #5672 @trentm

refactor(resources): update semconv usage to ATTR_ exports #5666 @trentm

test(sdk-metrics): fix multiple problematic assertRejects() calls #5611 @cjihrig

refactor: replace assertRejects() with assert.rejects() #5614 @cjihrig

refactor(core): migrate from deprecated semconv constants #5575 @alumni55748

refactor(opentelemetry-core): simplify parseKeyPairsIntoRecord() #5610 @cjihrig

Commits

4ce5bd1 chore: prepare release 2.0.1/0.201.0 (#5683)
6803723 fix(deps): update all patch versions (#5685)
d4d3732 feat(instrumentation): export generic 'semconvStabilityFromStr()' utility, ra...
56610a0 test: test Node.js 24 in CI (#5661)
697e1d3 refactor(instrumentation-http): Add back support for http semconv (#5665)
373edd9 Revert "fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor...
0c21db4 feat(instrumentation-xml-http-request): support migration to stable HTTP semc...
0665c85 refactor(sdk-node): update semconv usage to ATTR_ exports (#5668)
d07d630 refactor(sdk-trace-base): update semconv usage to ATTR_ exports (#5669)
bc8c94e refactor(sdk-trace-node): update semconv usage to ATTR_ exports (#5670)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-proto from 0.200.0 to 0.201.1

Release notes

Sourced from @opentelemetry/exporter-logs-otlp-proto's releases.

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

fix(instrumentation): Change SemconvStability export from const enum to enum to allow single-file transpilation tooling to work with code that uses SemconvStability. #5691 @trentm

experimental/v0.201.0

0.201.0

🚀 Features

feat(instrumentation-xml-http-request): support migration to stable HTTP semconv, v1.23.1 #5662 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation-fetch): support migration to stable HTTP semconv, v1.23.1 #5651 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation): New semconvStabilityFromStr() utility for semconv stability migration in instrumentations. #5684 @trentm

See the utility comment.

feat(instrumentation-grpc): support migration to stable HTTP semconv #5653 @JamieDanielson

feat(instrumentation-http): capture synthetic source type on requests #5488 @JacksonWeber

🐛 Bug Fixes

fix(otlp-transformer): do not throw when deserializing empty JSON response #5551 @pichlermarc

fix(instrumentation-http): report stable client metrics response code #9586 @jtescher

fix(sdk-node): instantiate baggage processor when env var is set #5634 @pichlermarc

🏠 Internal

refactor(instrumentation-http): Remove legacy http span attributes and metrics #5552 @svetlanabrennan

refactor(instrumentation-http): Add back support for http semconv #5665 @JamieDanielson

Note: We initially removed support for legacy http attributes and metrics, but then added back for an additional 6 months to ensure all instrumentations could be updated and kept consistent. There should be no net new change in this instrumentation related to these semantic conventions. See #5646 for details.

refactor(sdk-node): update semconv usage to ATTR_ exports #5668 @trentm

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's resource detector setup. #5582 @beeme1mr

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's logging setup. #5563 @weyert

test: test Node.js 24 in CI #5661 @cjihrig

Commits

9dbd1e4 chore: prepare next release (#5696)
4e2703c fix(instrumentation): change SemconvStability export from const enum to `...
072d8a8 refactor(semantic-conventions): use weaver 'file_name' template config (#5689)
04545fa refactor(semantic-conventions): tweak the leading spacing of comments on enum...
baec0a3 refactor(semantic-conventions): weaver 0.13.0 supports a 'stable_only' arg to...
4ce5bd1 chore: prepare release 2.0.1/0.201.0 (#5683)
6803723 fix(deps): update all patch versions (#5685)
d4d3732 feat(instrumentation): export generic 'semconvStabilityFromStr()' utility, ra...
56610a0 test: test Node.js 24 in CI (#5661)
697e1d3 refactor(instrumentation-http): Add back support for http semconv (#5665)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-proto from 0.200.0 to 0.201.1

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-proto's releases.

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

fix(instrumentation): Change SemconvStability export from const enum to enum to allow single-file transpilation tooling to work with code that uses SemconvStability. #5691 @trentm

experimental/v0.201.0

0.201.0

🚀 Features

feat(instrumentation-xml-http-request): support migration to stable HTTP semconv, v1.23.1 #5662 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation-fetch): support migration to stable HTTP semconv, v1.23.1 #5651 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation): New semconvStabilityFromStr() utility for semconv stability migration in instrumentations. #5684 @trentm

See the utility comment.

feat(instrumentation-grpc): support migration to stable HTTP semconv #5653 @JamieDanielson

feat(instrumentation-http): capture synthetic source type on requests #5488 @JacksonWeber

🐛 Bug Fixes

fix(otlp-transformer): do not throw when deserializing empty JSON response #5551 @pichlermarc

fix(instrumentation-http): report stable client metrics response code #9586 @jtescher

fix(sdk-node): instantiate baggage processor when env var is set #5634 @pichlermarc

🏠 Internal

refactor(instrumentation-http): Remove legacy http span attributes and metrics #5552 @svetlanabrennan

refactor(instrumentation-http): Add back support for http semconv #5665 @JamieDanielson

Note: We initially removed support for legacy http attributes and metrics, but then added back for an additional 6 months to ensure all instrumentations could be updated and kept consistent. There should be no net new change in this instrumentation related to these semantic conventions. See #5646 for details.

refactor(sdk-node): update semconv usage to ATTR_ exports #5668 @trentm

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's resource detector setup. #5582 @beeme1mr

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's logging setup. #5563 @weyert

test: test Node.js 24 in CI #5661 @cjihrig

Commits

9dbd1e4 chore: prepare next release (#5696)
4e2703c fix(instrumentation): change SemconvStability export from const enum to `...
072d8a8 refactor(semantic-conventions): use weaver 'file_name' template config (#5689)
04545fa refactor(semantic-conventions): tweak the leading spacing of comments on enum...
baec0a3 refactor(semantic-conventions): weaver 0.13.0 supports a 'stable_only' arg to...
4ce5bd1 chore: prepare release 2.0.1/0.201.0 (#5683)
6803723 fix(deps): update all patch versions (#5685)
d4d3732 feat(instrumentation): export generic 'semconvStabilityFromStr()' utility, ra...
56610a0 test: test Node.js 24 in CI (#5661)
697e1d3 refactor(instrumentation-http): Add back support for http semconv (#5665)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-proto from 0.200.0 to 0.201.1

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-proto's releases.

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

fix(instrumentation): Change SemconvStability export from const enum to enum to allow single-file transpilation tooling to work with code that uses SemconvStability. #5691 @trentm

experimental/v0.201.0

0.201.0

🚀 Features

feat(instrumentation-xml-http-request): support migration to stable HTTP semconv, v1.23.1 #5662 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation-fetch): support migration to stable HTTP semconv, v1.23.1 #5651 @trentm

Configure the instrumentation with semconvStabilityOptIn: 'http' to use the new, stable semconv v1.23.1 semantics or 'http/dup' for both old (v1.7.0) and stable semantics. When semconvStabilityOptIn is not specified (or does not contain these values), it uses the old semconv v1.7.0. I.e. the default behavior is unchanged.

feat(instrumentation): New semconvStabilityFromStr() utility for semconv stability migration in instrumentations. #5684 @trentm

See the utility comment.

feat(instrumentation-grpc): support migration to stable HTTP semconv #5653 @JamieDanielson

feat(instrumentation-http): capture synthetic source type on requests #5488 @JacksonWeber

🐛 Bug Fixes

fix(otlp-transformer): do not throw when deserializing empty JSON response #5551 @pichlermarc

fix(instrumentation-http): report stable client metrics response code #9586 @jtescher

fix(sdk-node): instantiate baggage processor when env var is set #5634 @pichlermarc

🏠 Internal

refactor(instrumentation-http): Remove legacy http span attributes and metrics #5552 @svetlanabrennan

refactor(instrumentation-http): Add back support for http semconv #5665 @JamieDanielson

Note: We initially removed support for legacy http attributes and metrics, but then added back for an additional 6 months to ensure all instrumentations could be updated and kept consistent. There should be no net new change in this instrumentation related to these semantic conventions. See #5646 for details.

refactor(sdk-node): update semconv usage to ATTR_ exports #5668 @trentm

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's resource detector setup. #5582 @beeme1mr

chore(sdk-node): Refactored using get*FromEnv utility function instead of process.env for NodeSDK's logging setup. #5563 @weyert

test: test Node.js 24 in CI #5661 @cjihrig

Commits

9dbd1e4 chore: prepare next release (#5696)
4e2703c fix(instrumentation): change SemconvStability export from const enum to `...
072d8a8 refactor(semantic-conventions): use weaver 'file_name' template config (#5689)
04545fa refactor(semantic-conventions): tweak the leading spacing of comments on enum...
baec0a3 refactor(semantic-conventions): weaver 0.13.0 supports a 'stable_only' arg to...
4ce5bd1 chore: prepare release 2.0.1/0.201.0 (#5683)
6803723 fix(deps): update all patch versions (#5685)
d4d3732 feat(instrumentation): export generic 'semconvStabilityFromStr()' utility, ra...
56610a0 test: test Node.js 24 in CI (#5661)
697e1d3 refactor(instrumentation-http): Add back support for http semconv (#5665)
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-kafkajs from 0.9.2 to 0.10.0

Release notes

Sourced from @opentelemetry/instrumentation-kafkajs's releases.

instrumentation-kafkajs: v0.10.0

0.10.0 (2025-05-15)

Features

deps: update deps matching '@opentelemetry/*' (#2828) (59c2a4c)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.46.0 to ^0.47.0

Changelog

Sourced from @opentelemetry/instrumentation-kafkajs's changelog.

0.10.0

🐛 Bug Fix

#186 [size/XS] fix: fixes broken readme links (@michaelgoin)

🎉 New Plugins

#171 feat: Hapi auto-instrumentation (@carolinee21)

#144 feat: adding Koa instrumentation (@carolinee21)

🚀 Enhancement

Other

#183 [mysql] implement semantic conventions (@naseemkullah)

#196 fix: new version with TextMapPropagator interface (@jufab)

#184 chore: moved plugins-node-all into contrib repo from opentelemetry-js (@michaelgoin)

#187 [mongodb] implement semantic db conventions (@naseemkullah)

#172 [Plugin User Interaction]: Improve causality of spans from bubbled events (@johnbley)

#164 feat: Add React Plugin (@thgao)

#170 fix: various compilation errors (@naseemkullah)

opentelemetry-test-utils

#167 ioredis and redis DB semantic conventions (@naseemkullah)

🏠 Internal

#194 Ioredis cleanup (@naseemkullah)

#195 redis cleanup (@naseemkullah)

#192 Handful of document-load fixes (@johnbley)

#191 Zone.js fixed failing build (@obecny)

#174 feat(opentelemetry-plugin-pg): omit pg.values by default (@sergioregueira)

Committers: 9

Bartlomiej Obecny (@obecny)

John Bley (@johnbley)

Julien Fabre (@jufab)

Michael Goin (@michaelgoin)

Naseem (@naseemkullah)

Sergio Regueira (@sergioregueira)

Shivkanya Andhare (@shivkanya9146)

Tina Gao (@thgao)

@carolinee21

0.9.0

🚀 (Enhancement)

#162 chore: clean up span naming (@johnbley)

#165 chore: bump opentelemetry core dependencies (@dyladan)

🐛 (Bug Fix)

#158 fix: patch removeEventListener to properly remove patched callbacks (@johnbley)

Committers: 10

Bartlomiej Obecny (@obecny)

... (truncated)

Commits

6430737 v0.10.0 proposal (#199)
b856e10 feat: implement mysql semantic conventions (#183)
cb18633 fix: import type and remove unneeded type (#194)
fb86c6f redis cleanup (#195)
16d3515 fix: new version with TextMapPropagator interface (#196)
5c81884 Handful of document-load fixes (#192)
1702d94 Merge pull request #184 from michaelgoin/migrate-plugins-node-all
de55eeb chore: bumps plugins-node-core to ^0.11.0 for latest release
c3458be Merge branch 'master' into migrate-plugins-node-all
2915c43 [mongodb] implement semantic db conventions (#187)
Additional commits viewable in compare view

Updates @opentelemetry/resource-detector-container from 0.7.0 to 0.7.1

Release notes

Sourced from @opentelemetry/resource-detector-container's releases.

resource-detector-container: v0.7.1

0.7.1 (2025-05-15)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-fs bumped from ^0.20.0 to ^0.21.0

Changelog

Sourced from @opentelemetry/resource-detector-container's changelog.

CHANGELOG

As of v0.25.1 (2022-01-24) changelog content has moved to separate CHANGELOG.md files for each package. Use this search for a list of all CHANGELOG.md files in this repo.

Unreleased

0.25.0

🐛 Bug Fix

#619 fix: GraphQL throws TypeError: Cannot read property 'startToken' of undefined (@obecny)

#643 fix(user-interaction): event listeners have wrong this when listening for bubbled events (@t2t2)

#562 fix(mysql): bind get connection callback to active context (@sstone1)

#589 fix(hapi-instrumentation): close spans on errors in instrumented functions (@CptSchnitz)

#580 fix: redis instrumentation loses context when using callbacks (@aspectom)

🚀 Enhancement

Other

#626 feat(mongodb): add db statement serializer config (@nozik)

#622 docs: add missing fetch instrumentation (@meteorlxy)

#553 feat: Add NestJS instrumentation (@Rauno56)

#588 chore: adding instrumentation for connect (@obecny)

opentelemetry-test-utils

#593 feat: move aws/gcp detectors from opentelemetry-js repo (@legendecas)

🏠 Internal

opentelemetry-test-utils

#641 chore(mysql2): adding TAV script (@YanivD)

#639 build(test-utils): marking test-utils as non private so it can be published (@blumamir)

#596 docs(test-utils): add README.md for @opentelemetry/test-utils (@Rauno56)

Other

#648 ci: speed up lint workflow with hoisting (@YanivD)

#614 ci: speed up PR unit-test run time (@blumamir)

#612 chore: ignore renovate-bot for component owners (@dyladan)

#597 chore: add script to update core dependencies (@dyladan)

#606 chore: add ownership for aws propagator (@dyladan)

#601 chore: configure renovate to bump API (@Flarna)

📝 Documentation

opentelemetry-browser-extension-autoinjection

#615 docs: correct the build instructions (@jessitron)

Committers: 16

Amir Blum (@blumamir)

Bartlomiej Obecny (@obecny)

Daniel Dyla (@dyladan)

Gerhard Stöbich (@Flarna)

Herman (@hermanbanken)

Jessica Kerr (@jessitron)

Ofer Adelstein (@CptSchnitz)

... (truncated)

Commits

32889bd chore: release main (#1396)
17c3bf1 ci: fix excessive memory usage by preventing source-map generation (#1419)
62a806f chore(deps): update dependency rimraf to v4 (#1402)
f5f7ac6 feat(ioredis): Update instrumentation-ioredis to version 5.x.x (#1121)
7180353 chore(instrumentation-fs): remove node 14 promises check from tests (#1413)
40461ce test(koa): add test all versions to @koa/router (#1398)
3ca874e fix(instrumentation-fs): fix instrumentation of fs/promises (#1375)
e93a192 fix: remove component attribute from instrumentations (#1399)
ee0a59a fix(instrumentation-fs): allow realpath.native and realpathSync.native (#1332)
3484b75 chore(deps): update dependency @koa/router to v12 (#1240)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.0.0 to 2.0.1

Release notes

Sourced from @opentelemetry/resources's releases.

v2.0.1

2.0.1

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladanDescription has been truncated

Bumps the production-dependencies group with 13 updates: | Package | From | To | | --- | --- | --- | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.58.1` | `0.59.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.0.0` | `2.0.1` | | [@opentelemetry/exporter-logs-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.200.0` | `0.201.1` | | [@opentelemetry/exporter-metrics-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.200.0` | `0.201.1` | | [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.200.0` | `0.201.1` | | [@opentelemetry/instrumentation-kafkajs](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.9.2` | `0.10.0` | | [@opentelemetry/resource-detector-container](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.7.0` | `0.7.1` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.0.0` | `2.0.1` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.200.0` | `0.201.1` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.0.0` | `2.0.1` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.200.0` | `0.201.1` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.0.0` | `2.0.1` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.0.0` | `2.0.1` | Updates `@opentelemetry/auto-instrumentations-node` from 0.58.1 to 0.59.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@auto-instrumentations-node-v0.58.1...auto-instrumentations-node-v0.59.0) Updates `@opentelemetry/core` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.0...v2.0.1) Updates `@opentelemetry/exporter-logs-otlp-proto` from 0.200.0 to 0.201.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.200.0...experimental/v0.201.1) Updates `@opentelemetry/exporter-metrics-otlp-proto` from 0.200.0 to 0.201.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.200.0...experimental/v0.201.1) Updates `@opentelemetry/exporter-trace-otlp-proto` from 0.200.0 to 0.201.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.200.0...experimental/v0.201.1) Updates `@opentelemetry/instrumentation-kafkajs` from 0.9.2 to 0.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@instrumentation-aws-sdk-v0.9.2...v0.10.0) Updates `@opentelemetry/resource-detector-container` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@v0.7.0...instrumentation-fs-v0.7.1) Updates `@opentelemetry/resources` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.0...v2.0.1) Updates `@opentelemetry/sdk-logs` from 0.200.0 to 0.201.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.200.0...experimental/v0.201.1) Updates `@opentelemetry/sdk-metrics` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.0...v2.0.1) Updates `@opentelemetry/sdk-node` from 0.200.0 to 0.201.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.200.0...experimental/v0.201.1) Updates `@opentelemetry/sdk-trace-base` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.0...v2.0.1) Updates `@opentelemetry/sdk-trace-node` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.0...v2.0.1) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/core" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-logs-otlp-proto" dependency-version: 0.201.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-proto" dependency-version: 0.201.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-proto" dependency-version: 0.201.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/instrumentation-kafkajs" dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resource-detector-container" dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.201.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.201.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-05-20T07:23:08Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

socket-security · 2025-05-20T07:27:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@opentelemetry/resource-detector-container@0.7.0 ⏵ 0.7.1			^-1
@opentelemetry/resources@2.0.0 ⏵ 2.0.1	⁺¹	⁺¹
@opentelemetry/sdk-metrics@2.0.0 ⏵ 2.0.1
@opentelemetry/sdk-trace-base@2.0.0 ⏵ 2.0.1
@opentelemetry/sdk-trace-node@2.0.0 ⏵ 2.0.1
@opentelemetry/core@2.0.0 ⏵ 2.0.1	⁺¹	⁺¹
@opentelemetry/exporter-metrics-otlp-proto@0.200.0 ⏵ 0.201.1			⁺²
@opentelemetry/sdk-logs@0.200.0 ⏵ 0.201.1	⁺¹	⁺¹
@opentelemetry/exporter-logs-otlp-proto@0.200.0 ⏵ 0.201.1			⁺²
@opentelemetry/exporter-trace-otlp-proto@0.200.0 ⏵ 0.201.1			⁺²
@opentelemetry/sdk-node@0.200.0 ⏵ 0.201.1	⁺¹		⁺²
@opentelemetry/instrumentation-kafkajs@0.9.2 ⏵ 0.10.0
@opentelemetry/auto-instrumentations-node@0.58.1 ⏵ 0.59.0		⁺¹

View full report

github-actions · 2025-05-20T12:39:20Z

🎉 This PR is included in version 2.0.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 20, 2025

dependabot bot requested a review from a team as a code owner May 20, 2025 07:18

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 20, 2025

basti1302 merged commit 08548c9 into main May 20, 2025
11 checks passed

basti1302 deleted the dependabot/npm_and_yarn/production-dependencies-076b92b0f0 branch May 20, 2025 12:36

github-actions bot added the released label May 20, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): bump the production-dependencies group with 13 updates #126

fix(deps): bump the production-dependencies group with 13 updates #126

Uh oh!

dependabot bot commented on behalf of github May 20, 2025

Uh oh!

sonarqubecloud bot commented May 20, 2025

Uh oh!

socket-security bot commented May 20, 2025

Uh oh!

Uh oh!

github-actions bot commented May 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix(deps): bump the production-dependencies group with 13 updates #126

fix(deps): bump the production-dependencies group with 13 updates #126

Uh oh!

Conversation

dependabot bot commented on behalf of github May 20, 2025

auto-instrumentations-node: v0.59.0

0.59.0 (2025-05-15)

Features

Dependencies

v2.0.1

2.0.1

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.0.1

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

experimental/v0.201.0

0.201.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

experimental/v0.201.0

0.201.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.201.1

0.201.1

🐛 Bug Fixes

experimental/v0.201.0

0.201.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

instrumentation-kafkajs: v0.10.0

0.10.0 (2025-05-15)

Features

Dependencies

0.10.0

🐛 Bug Fix

🎉 New Plugins

🚀 Enhancement

🏠 Internal

Committers: 9

0.9.0

🚀 (Enhancement)

🐛 (Bug Fix)

Committers: 10

resource-detector-container: v0.7.1

0.7.1 (2025-05-15)

Dependencies

CHANGELOG

Unreleased

0.25.0

🐛 Bug Fix

🚀 Enhancement

🏠 Internal

📝 Documentation

Committers: 16

v2.0.1

2.0.1

🐛 Bug Fixes

Uh oh!

sonarqubecloud bot commented May 20, 2025

Quality Gate passed

Uh oh!

socket-security bot commented May 20, 2025

Uh oh!

Uh oh!

github-actions bot commented May 20, 2025

Uh oh!

Reviewers