chore(deps): bump the production-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #9 · hubofwyn/agentic-workflow

dependabot · 2025-11-03T01:58:44Z

Bumps the production-dependencies group with 19 updates in the / directory:

Package	From	To
@opentelemetry/auto-instrumentations-node	`0.40.3`	`0.66.0`
@opentelemetry/exporter-prometheus	`0.46.0`	`0.207.0`
@opentelemetry/exporter-trace-otlp-grpc	`0.46.0`	`0.207.0`
@opentelemetry/instrumentation-express	`0.34.1`	`0.56.0`
@opentelemetry/instrumentation-http	`0.46.0`	`0.207.0`
@opentelemetry/resources	`1.30.1`	`2.2.0`
@opentelemetry/sdk-metrics	`1.30.1`	`2.2.0`
@opentelemetry/sdk-node	`0.46.0`	`0.207.0`
@opentelemetry/sdk-trace-base	`1.30.1`	`2.2.0`
@opentelemetry/sdk-trace-node	`1.30.1`	`2.2.0`
chokidar	`3.6.0`	`4.0.3`
dotenv	`16.6.1`	`17.2.3`
express-rate-limit	`7.5.1`	`8.2.1`
helmet	`7.2.0`	`8.1.0`
joi	`17.13.3`	`18.0.1`
pino	`8.21.0`	`10.1.0`
pino-pretty	`10.3.1`	`13.1.2`
redis	`4.7.1`	`5.9.0`
zod	`3.25.76`	`4.1.12`

Updates @opentelemetry/auto-instrumentations-node from 0.40.3 to 0.66.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.66.0

0.66.0 (2025-10-21)

Features

auto-instrumentations-node: add OpenAI instrumentation (#3164) (d2b090e)

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-bunyan bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-connect bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-cucumber bumped from ^0.22.0 to ^0.23.0

@opentelemetry/instrumentation-dataloader bumped from ^0.24.0 to ^0.25.0

@opentelemetry/instrumentation-dns bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-express bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-fastify bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-fs bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-graphql bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-hapi bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-ioredis bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-knex bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-koa bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-memcached bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-mongodb bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-mongoose bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-mysql bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-net bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-openai bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-oracledb bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-pg bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-pino bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-redis bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-restify bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-router bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-socket.io bumped from ^0.53.0 to ^0.54.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.66.0 (2025-10-21)

Features

auto-instrumentations-node: add OpenAI instrumentation (#3164) (d2b090e)

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-bunyan bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-connect bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-cucumber bumped from ^0.22.0 to ^0.23.0

@opentelemetry/instrumentation-dataloader bumped from ^0.24.0 to ^0.25.0

@opentelemetry/instrumentation-dns bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-express bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-fastify bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-fs bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-graphql bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-hapi bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-ioredis bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-knex bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-koa bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-memcached bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-mongodb bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-mongoose bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-mysql bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-net bumped from ^0.50.0 to ^0.51.0

@opentelemetry/instrumentation-openai bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-oracledb bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-pg bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-pino bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-redis bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-restify bumped from ^0.52.0 to ^0.53.0

@opentelemetry/instrumentation-router bumped from ^0.51.0 to ^0.52.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-socket.io bumped from ^0.53.0 to ^0.54.0

@opentelemetry/instrumentation-tedious bumped from ^0.25.0 to ^0.26.0

... (truncated)

Commits

2801ab2 chore: release main (#3151)
ab96334 feat(deps): update deps matching '@opentelemetry/*' (#3187)
c352766 chore(eslint): upgrade to eslint 9 (#3001)
d2b090e feat(auto-instrumentations-node): add OpenAI instrumentation (#3164)
333e026 chore: release main (#3135)
704c716 feat(deps): update deps matching '@opentelemetry/*' (#3145)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/auto-instrumentations-node since your current version.

Updates @opentelemetry/exporter-prometheus from 0.46.0 to 0.207.0

Release notes

Sourced from @opentelemetry/exporter-prometheus's releases.

experimental/v0.207.0

0.207.0

💥 Breaking Changes

feat(sdk-node)!: drop lazy-loading of jaeger exporter #5989 @pichlermarc

(user-facing): setting OTEL_TRACE_EXPORTER=jaeger not instantiate a Jaeger exporter anymore, please use OTEL_TRACE_EXPORTER=otlp instead.

Jaeger now has native API support for OTLP and Jaeger's Thrift API endpoints have been deprecated

feat(otlp-exporter-base): check OTEL_EXPORTER_OTLP_CERTIFICATE and other related env vars when resolving configuration for OTLP HTTP exporters #6015 @david-luna

🚀 Features

feat(sdk-node): always set up propagtion and context manager #5930

using (new NodeSDK).start() will now automatically set up a context management and propagation, even if no Trace SDK is initialized.

feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP & GRPC exporters #5928 @david-luna

feat(web): add session handling implementation 5173 @martinkuba

🐛 Bug Fixes

fix(sdk-logs): Fix the batchLogProcessor exporting only upon _scheduledDelayMillis and ignoring maxExportBatchSize #5961 @jacksonweber

fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header #5687 @david-luna

🏠 Internal

test(opentelemetry-configuration): simplify management of environment variables #6004 @cjihrig

test(opentelemetry-configuration): preserve special process.env behavior #6010 @cjihrig

test(sdk-logs): ensure process.env is cleaned up between tests #6017 @cjihrig

test(otlp-grpc-exporter-base): remove duplicated delete statements #6022 @cjihrig

test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests #6026 @cjihrig

experimental/v0.206.0

0.206.0

🚀 Features

feat(otlp-transformer): add span flags support for isRemote property #5910 @nikhilmantri0902

feat(sampler-composite): Added experimental implementations of draft composite sampling spec #5839 @anuraaga

feat(opentelemetry-configuration): add more attributes to config model #5826 @maryliag

feat(opentelemetry-configuration): Parse of Configuration File #5875 @maryliag

feat(opentelemetry-configuration): parse of array objects on configuration file #5947 @maryliag

feat(opentelemetry-configuration): parse of environment variables on configuration file #5947 @maryliag

🐛 Bug Fixes

fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used #4788 @reberhardt7

fix(otlp-transformer): trunc hrTime to int for nanos converting #5924 @blumamir

🏠 Internal

... (truncated)

Commits

fb6476d chore: prepare next release (#6008)
2d115fd test: test Node.js 25 in CI (#6019)
fe8fd65 feat(opentelemetry-configuration): support file with format rc.2 (#6029)
91e0d23 chore(deps): update actions/setup-node action to v6 (#6028)
3bb5717 test(opentelemetry-configuration): ensure process.env is cleaned up after `...
a93b1dc chore(move-to-emeriuts): create token before checkout (#6018)
a39500d test(otlp-grpc-exporter-base): remove duplicated delete statements (#6022)
8c62fb1 chore(deps): Update import-in-the-middle (#6020)
6854413 test(sdk-logs): ensure process.env is cleaned up between tests (#6017)
3353b6f feat(otlp-exporter-base): accept TLS config for node HTTP exporters from env ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/exporter-prometheus since your current version.

Updates @opentelemetry/exporter-trace-otlp-grpc from 0.46.0 to 0.207.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-grpc's releases.

experimental/v0.207.0

0.207.0

💥 Breaking Changes

feat(sdk-node)!: drop lazy-loading of jaeger exporter #5989 @pichlermarc

(user-facing): setting OTEL_TRACE_EXPORTER=jaeger not instantiate a Jaeger exporter anymore, please use OTEL_TRACE_EXPORTER=otlp instead.

Jaeger now has native API support for OTLP and Jaeger's Thrift API endpoints have been deprecated

feat(otlp-exporter-base): check OTEL_EXPORTER_OTLP_CERTIFICATE and other related env vars when resolving configuration for OTLP HTTP exporters #6015 @david-luna

🚀 Features

feat(sdk-node): always set up propagtion and context manager #5930

using (new NodeSDK).start() will now automatically set up a context management and propagation, even if no Trace SDK is initialized.

feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP & GRPC exporters #5928 @david-luna

feat(web): add session handling implementation 5173 @martinkuba

🐛 Bug Fixes

fix(sdk-logs): Fix the batchLogProcessor exporting only upon _scheduledDelayMillis and ignoring maxExportBatchSize #5961 @jacksonweber

fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header #5687 @david-luna

🏠 Internal

test(opentelemetry-configuration): simplify management of environment variables #6004 @cjihrig

test(opentelemetry-configuration): preserve special process.env behavior #6010 @cjihrig

test(sdk-logs): ensure process.env is cleaned up between tests #6017 @cjihrig

test(otlp-grpc-exporter-base): remove duplicated delete statements #6022 @cjihrig

test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests #6026 @cjihrig

experimental/v0.206.0

0.206.0

🚀 Features

feat(otlp-transformer): add span flags support for isRemote property #5910 @nikhilmantri0902

feat(sampler-composite): Added experimental implementations of draft composite sampling spec #5839 @anuraaga

feat(opentelemetry-configuration): add more attributes to config model #5826 @maryliag

feat(opentelemetry-configuration): Parse of Configuration File #5875 @maryliag

feat(opentelemetry-configuration): parse of array objects on configuration file #5947 @maryliag

feat(opentelemetry-configuration): parse of environment variables on configuration file #5947 @maryliag

🐛 Bug Fixes

fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used #4788 @reberhardt7

fix(otlp-transformer): trunc hrTime to int for nanos converting #5924 @blumamir

🏠 Internal

... (truncated)

Commits

fb6476d chore: prepare next release (#6008)
2d115fd test: test Node.js 25 in CI (#6019)
fe8fd65 feat(opentelemetry-configuration): support file with format rc.2 (#6029)
91e0d23 chore(deps): update actions/setup-node action to v6 (#6028)
3bb5717 test(opentelemetry-configuration): ensure process.env is cleaned up after `...
a93b1dc chore(move-to-emeriuts): create token before checkout (#6018)
a39500d test(otlp-grpc-exporter-base): remove duplicated delete statements (#6022)
8c62fb1 chore(deps): Update import-in-the-middle (#6020)
6854413 test(sdk-logs): ensure process.env is cleaned up between tests (#6017)
3353b6f feat(otlp-exporter-base): accept TLS config for node HTTP exporters from env ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/exporter-trace-otlp-grpc since your current version.

Updates @opentelemetry/instrumentation-express from 0.34.1 to 0.56.0

Release notes

Sourced from @opentelemetry/instrumentation-express's releases.

instrumentation-redis: v0.56.0

0.56.0 (2025-10-21)

Features

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.53.0 to ^0.54.0

instrumentation-pino: v0.54.0

0.54.0 (2025-10-21)

Features

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

instrumentation-pino: support pino@10 (#3150) (0c95b8e)

Bug Fixes

deps: update all patch versions (#3134) (c302e35)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.53.0 to ^0.54.0

instrumentation-net: v0.51.0

0.51.0 (2025-10-21)

Features

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

instrumentation-nestjs-core: v0.54.0

0.54.0 (2025-10-21)

Features

... (truncated)

Changelog

Sourced from @opentelemetry/instrumentation-express's changelog.

0.56.0 (2025-10-21)

Features

deps: update deps matching '@opentelemetry/*' (#3187) (ab96334)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.53.0 to ^0.54.0

0.55.0 (2025-10-06)

Features

deps: update deps matching '@opentelemetry/*' (#3145) (704c716)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.52.2 to ^0.53.0

0.54.3 (2025-09-29)

Bug Fixes

force new release-please PR (#3123) (0dab838)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.52.1 to ^0.52.2

0.54.2 (2025-09-25)

Bug Fixes

force new release-please PR (#3098) (13c58e9)

... (truncated)

Commits

9d90781 chore: add test-services scripts per package (#2932)
e7960a2 chore: release main (#2931)
e4ab2a9 feat(deps): update deps matching '@opentelemetry/*' (#2930)
17f4334 chore: rename workspace dirs to packages/${package-base-name} (#2928)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/instrumentation-express since your current version.

Updates @opentelemetry/instrumentation-http from 0.46.0 to 0.207.0

Release notes

Sourced from @opentelemetry/instrumentation-http's releases.

experimental/v0.207.0

0.207.0

💥 Breaking Changes

feat(sdk-node)!: drop lazy-loading of jaeger exporter #5989 @pichlermarc

(user-facing): setting OTEL_TRACE_EXPORTER=jaeger not instantiate a Jaeger exporter anymore, please use OTEL_TRACE_EXPORTER=otlp instead.

Jaeger now has native API support for OTLP and Jaeger's Thrift API endpoints have been deprecated

feat(otlp-exporter-base): check OTEL_EXPORTER_OTLP_CERTIFICATE and other related env vars when resolving configuration for OTLP HTTP exporters #6015 @david-luna

🚀 Features

feat(sdk-node): always set up propagtion and context manager #5930

using (new NodeSDK).start() will now automatically set up a context management and propagation, even if no Trace SDK is initialized.

feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP & GRPC exporters #5928 @david-luna

feat(web): add session handling implementation 5173 @martinkuba

🐛 Bug Fixes

fix(sdk-logs): Fix the batchLogProcessor exporting only upon _scheduledDelayMillis and ignoring maxExportBatchSize #5961 @jacksonweber

fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header #5687 @david-luna

🏠 Internal

test(opentelemetry-configuration): simplify management of environment variables #6004 @cjihrig

test(opentelemetry-configuration): preserve special process.env behavior #6010 @cjihrig

test(sdk-logs): ensure process.env is cleaned up between tests #6017 @cjihrig

test(otlp-grpc-exporter-base): remove duplicated delete statements #6022 @cjihrig

test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests #6026 @cjihrig

experimental/v0.206.0

0.206.0

🚀 Features

feat(otlp-transformer): add span flags support for isRemote property #5910 @nikhilmantri0902

feat(sampler-composite): Added experimental implementations of draft composite sampling spec #5839 @anuraaga

feat(opentelemetry-configuration): add more attributes to config model #5826 @maryliag

feat(opentelemetry-configuration): Parse of Configuration File #5875 @maryliag

feat(opentelemetry-configuration): parse of array objects on configuration file #5947 @maryliag

feat(opentelemetry-configuration): parse of environment variables on configuration file #5947 @maryliag

🐛 Bug Fixes

fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used #4788 @reberhardt7

fix(otlp-transformer): trunc hrTime to int for nanos converting #5924 @blumamir

🏠 Internal

... (truncated)

Commits

fb6476d chore: prepare next release (#6008)
2d115fd test: test Node.js 25 in CI (#6019)
fe8fd65 feat(opentelemetry-configuration): support file with format rc.2 (#6029)
91e0d23 chore(deps): update actions/setup-node action to v6 (#6028)
3bb5717 test(opentelemetry-configuration): ensure process.env is cleaned up after `...
a93b1dc chore(move-to-emeriuts): create token before checkout (#6018)
a39500d test(otlp-grpc-exporter-base): remove duplicated delete statements (#6022)
8c62fb1 chore(deps): Update import-in-the-middle (#6020)
6854413 test(sdk-logs): ensure process.env is cleaned up between tests (#6017)
3353b6f feat(otlp-exporter-base): accept TLS config for node HTTP exporters from env ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/instrumentation-http since your current version.

Updates @opentelemetry/resources from 1.30.1 to 2.2.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.2.0

2.2.0

🐛 Bug Fixes

fix(core): avoid leaking Node.js types via unrefTimer() util #5986 @pichlermarc

fix(core): avoid leaking Node.js types via otperformance #5987 @pichlermarc

important: this bug fix may be breaking for certain uses of otperformance

otperformance.now() and otperformance.timeOrigin are not affected.

the previously used type was incorrect and overly broad, leading to unexpected run-time behavior runtimes that are not Node.js.

these problems are now caught on compile-time: if you have been using this API and this change is breaking to you, please consider using your target platform's performance implementation instead.

🏠 Internal

test(shim-opentracing): add comparison thresholds in flaky assertions #5974 @cjihrig

test(exporter-jaeger): clean up OTEL_EXPORTER_JAEGER_AGENT_PORT between tests #6003 @cjihrig

test(sdk-trace-base): ensure environment variables are cleaned up between tests #6011 @cjihrig

perf(opentelemetry-core): optimize attribute serialization #5866 @43081j

test: test Node.js 25 in CI #6019 @cjihrig

v2.1.0

2.1.0

🚀 Features

feat(opentelemetry-resources): add schema url #5070 @c-ehrlich

🐛 Bug Fixes

fix(sdk-metrics): Remove invalid default value for startTime param to ExponentialHistogramAccumulation. This only impacted the closurescript compiler. #5763 @trentm

🏠 Internal

chore: enable tsconfig isolatedModules #5697 @legendecas

v2.0.1

2.0.1

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

fix(resource): use dynamic import over require to improve ESM compliance #5298 @xiaoxiangmoe

📚 Documentation

refactor(metrics): Updated metrics samples to no longer treat sdk.start() as async #5617 @JacksonWeber

... (truncated)

Changelog

Sourced from @opentelemetry/resources's changelog.

2.2.0

🐛 Bug Fixes

fix(core): avoid leaking Node.js types via unrefTimer() util #5986 @pichlermarc

fix(core): avoid leaking Node.js types via otperformance #5987 @pichlermarc

important: this bug fix may be breaking for certain uses of otperformance

otperformance.now() and otperformance.timeOrigin are not affected.

the previously used type was incorrect and overly broad, leading to unexpected run-time behavior runtimes that are not Node.js.

these problems are now caught on compile-time: if you have been using this API and this change is breaking to you, please consider using your target platform's performance implementation instead.

🏠 Internal

test(shim-opentracing): add comparison thresholds in flaky assertions #5974 @cjihrig

test(exporter-jaeger): clean up OTEL_EXPORTER_JAEGER_AGENT_PORT between tests #6003 @cjihrig

test(sdk-trace-base): ensure environment variables are cleaned up between tests #6011 @cjihrig

perf(opentelemetry-core): optimize attribute serialization #5866 @43081j

test: test Node.js 25 in CI #6019 @cjihrig

2.1.0

🚀 Features

feat(opentelemetry-resources): add schema url #5070 @c-ehrlich

🐛 Bug Fixes

fix(sdk-metrics): Remove invalid default value for startTime param to ExponentialHistogramAccumulation. This only impacted the closurescript compiler. #5763 @trentm

🏠 Internal

chore: enable tsconfig isolatedModules #5697 @legendecas

2.0.1

🐛 Bug Fixes

fix(resources): guard asynchronous resource attribute rejections from causing unhandled promise rejection #5544 @dyladan

fix(resource): do not trigger Accessing resource attributes before async attributes settled warning when detecting resources #5546 @dyladan

verbose logging of detected resource removed

fix(resource): use dynamic import over require to improve ESM compliance #5298 @xiaoxiangmoe

fix(core): getNumberFromEnv should return number | undefined #5874 @shubham-vunet

📚 Documentation

refactor(metrics): Updated metrics samples to no longer treat sdk.start() as async #5617 @JacksonWeber

🏠 Internal

refactor(sdk-trace-base): update semconv usage to ATTR_ exports #5669 @trentm

... (truncated)

Commits

fb6476d chore: prepare next release (#6008)
2d115fd test: test Node.js 25 in CI (#6019)
fe8fd65 feat(opentelemetry-configuration): support file with format rc.2 (#6029)
91e0d23 chore(deps): update actions/setup-node action to v6 (#6028)
3bb5717 test(opentelemetry-configuration): ensure process.env is cleaned up after `...
a93b1dc chore(move-to-emeriuts): create token before checkout (#6018)
a39500d test(otlp-grpc-exporter-base): remove duplicated delete statements (#6022)
8c62fb1 chore(deps): Update import-in-the-middle (#6020)
6854413 test(sdk-logs): ensure process.env is cleaned up between tests (#6017)
3353b6f feat(otlp-exporter-base): accept TLS config for node HTTP exporters from env ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/resources since your current version.

Updates @opentelemetry/sdk-metrics from 1.30.1 to 2.2.0

Release notes

Sourced from @opentelemetry/sdk-metrics's releases.

v2.2.0

2.2.0

🐛 Bug Fixes

fix(core): avoid leaking Node.js types via unrefTimer() util #5986 @pichlermarc

fix(core): avoid leaking Node.js types via otperformance #5987 @pichlermarc

important: this bug fix may be breaking ...
Description has been truncated

dependabot · 2025-11-03T01:58:44Z

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…y with 19 updates Bumps the production-dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.40.3` | `0.66.0` | | [@opentelemetry/exporter-prometheus](https://github.com/open-telemetry/opentelemetry-js) | `0.46.0` | `0.207.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.46.0` | `0.207.0` | | [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.34.1` | `0.56.0` | | [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.46.0` | `0.207.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.2.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.2.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.46.0` | `0.207.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.2.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.2.0` | | [chokidar](https://github.com/paulmillr/chokidar) | `3.6.0` | `4.0.3` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.3` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.1` | `8.2.1` | | [helmet](https://github.com/helmetjs/helmet) | `7.2.0` | `8.1.0` | | [joi](https://github.com/hapijs/joi) | `17.13.3` | `18.0.1` | | [pino](https://github.com/pinojs/pino) | `8.21.0` | `10.1.0` | | [pino-pretty](https://github.com/pinojs/pino-pretty) | `10.3.1` | `13.1.2` | | [redis](https://github.com/redis/node-redis) | `4.7.1` | `5.9.0` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.1.12` | Updates `@opentelemetry/auto-instrumentations-node` from 0.40.3 to 0.66.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.66.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-prometheus` from 0.46.0 to 0.207.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.46.0...experimental/v0.207.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.46.0 to 0.207.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.46.0...experimental/v0.207.0) Updates `@opentelemetry/instrumentation-express` from 0.34.1 to 0.56.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.56.0/packages/instrumentation-express) Updates `@opentelemetry/instrumentation-http` from 0.46.0 to 0.207.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.46.0...experimental/v0.207.0) Updates `@opentelemetry/resources` from 1.30.1 to 2.2.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.2.0) Updates `@opentelemetry/sdk-metrics` from 1.30.1 to 2.2.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.2.0) Updates `@opentelemetry/sdk-node` from 0.46.0 to 0.207.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.46.0...experimental/v0.207.0) Updates `@opentelemetry/sdk-trace-base` from 1.30.1 to 2.2.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.2.0) Updates `@opentelemetry/sdk-trace-node` from 1.30.1 to 2.2.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.2.0) Updates `chokidar` from 3.6.0 to 4.0.3 - [Release notes](https://github.com/paulmillr/chokidar/releases) - [Commits](paulmillr/chokidar@3.6.0...4.0.3) Updates `dotenv` from 16.6.1 to 17.2.3 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v17.2.3) Updates `express-rate-limit` from 7.5.1 to 8.2.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.5.1...v8.2.1) Updates `helmet` from 7.2.0 to 8.1.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v7.2.0...v8.1.0) Updates `joi` from 17.13.3 to 18.0.1 - [Commits](hapijs/joi@v17.13.3...v18.0.1) Updates `pino` from 8.21.0 to 10.1.0 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v8.21.0...v10.1.0) Updates `pino-pretty` from 10.3.1 to 13.1.2 - [Release notes](https://github.com/pinojs/pino-pretty/releases) - [Commits](pinojs/pino-pretty@v10.3.1...v13.1.2) Updates `redis` from 4.7.1 to 5.9.0 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/[email protected]@5.9.0) Updates `zod` from 3.25.76 to 4.1.12 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.1.12) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.66.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-prometheus" dependency-version: 0.207.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.207.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/instrumentation-express" dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.207.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.207.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: chokidar dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: dotenv dependency-version: 17.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: helmet dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: joi dependency-version: 18.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: pino dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: pino-pretty dependency-version: 13.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: redis dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.1.12 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-11-17T03:46:07Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2025-11-27T04:31:23Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-1847f6896c branch from 4558522 to 88e92d4 Compare November 6, 2025 03:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group across 1 directory with 19 updates#9

chore(deps): bump the production-dependencies group across 1 directory with 19 updates#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-1847f6896c

dependabot Bot commented on behalf of github Nov 3, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 3, 2025

Uh oh!

dependabot Bot commented on behalf of github Nov 17, 2025

Uh oh!

dependabot Bot commented on behalf of github Nov 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

auto-instrumentations-node: v0.66.0

0.66.0 (2025-10-21)

Features

Dependencies

0.66.0 (2025-10-21)

Features

Dependencies

experimental/v0.207.0

0.207.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.206.0

0.206.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.207.0

0.207.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.206.0

0.206.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

instrumentation-redis: v0.56.0

0.56.0 (2025-10-21)

Features

Dependencies

instrumentation-pino: v0.54.0

0.54.0 (2025-10-21)

Features

Bug Fixes

Dependencies

instrumentation-net: v0.51.0

0.51.0 (2025-10-21)

Features

instrumentation-nestjs-core: v0.54.0

0.54.0 (2025-10-21)

Features

0.56.0 (2025-10-21)

Features

Dependencies

0.55.0 (2025-10-06)

Features

Dependencies

0.54.3 (2025-09-29)

Bug Fixes

Dependencies

0.54.2 (2025-09-25)

Bug Fixes

experimental/v0.207.0

0.207.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.206.0

0.206.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.2.0

2.2.0

🐛 Bug Fixes

🏠 Internal

v2.1.0

2.1.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.0.1

2.0.1

dependabot Bot commented on behalf of github Nov 3, 2025 •

edited

Loading