Skip to content

chore(deps): snyk dependency upgrade#97

Open
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-upgrade-005153b9b18b150088f6134c482abad1
Open

chore(deps): snyk dependency upgrade#97
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-upgrade-005153b9b18b150088f6134c482abad1

Conversation

@snyk-io

@snyk-io snyk-io Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

🛡️ Snyk Security Upgrade

This automated PR fixes security vulnerabilities found in @opentelemetry/exporter-logs-otlp-http.

📋 Changes

  • Package: @opentelemetry/exporter-logs-otlp-http
  • Upgrade: 0.215.0 → 0.219.0
  • Issues fixed: 0

Security Review

  • [] I have considered and reviewed security implications of this PR and included the summary below.

Security Impact Summary

The purpose of this PR is to update a dependency which meets the criteria set in snyk.

⚙️ Settings

@snyk-io snyk-io Bot requested a review from a team as a code owner July 3, 2026 01:54
@snyk-io

snyk-io Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Merge Risk: High

This upgrade spans several experimental versions and includes significant breaking changes that require developer action.

Key Breaking Changes:

  • XHR Transport Removed (v0.216.0): The deprecated transport based on XmlHttpRequest (XHR) has been removed and replaced with fetch(). This will break compatibility in older browser environments that do not have a native fetch() implementation.
  • Logs API Renaming (v0.219.0): In LoggerOptions, the scopeAttributes property has been renamed to attributes. Any logger configurations using scopeAttributes must be updated.
  • forceFlush() Method Required (v0.215.0): The LogRecordExporter interface now requires a forceFlush() method. Custom log exporters must implement this method to be compatible.

Recommendation:

  • If your application runs in older browsers without native fetch(), you must add a fetch() polyfill.
  • Review your logger instantiation and update any usage of scopeAttributes in LoggerOptions to attributes.
  • If you have implemented any custom log exporters, ensure they have a forceFlush() method.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@snyk-io

snyk-io Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant