build(deps): bump the minor-and-patch group in /backend with 22 updates by dependabot[bot] · Pull Request #396 · soroventures/EventHorizon

dependabot · 2026-06-14T10:44:29Z

Updates the requirements on @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-jaeger, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/resources, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base, @opentelemetry/semantic-conventions, axios, bullmq, express, express-rate-limit, ioredis, joi, mongoose, node-vault, pg, openapi-to-postmanv2, opossum, swagger-jsdoc, xstate, nock and sinon to permit the latest version.
Updates @opentelemetry/auto-instrumentations-node from 0.50.2 to 0.77.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.77.0

0.77.0 (2026-06-11)

Features

add @opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0

@opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.77.0 (2026-06-11)

Features

add @opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0

@opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-tedious bumped from ^0.37.0 to ^0.38.0

... (truncated)

Commits

4e52a90 chore: release main (#3524)
bd569b5 feat(deps): update deps matching '@opentelemetry/*' (#3567)
16bee31 feat: add @opentelemetry/instrumentation-host-metrics and integrate into auto...
15ef750 chore: release main (#3508)
e26a90a feat(deps): update deps matching '@opentelemetry/*' (#3523)
b68fb6d chore: release main (#3498)
e1ef3d1 feat(deps): update deps matching '@opentelemetry/*' (#3507)
03ed3a3 chore: release main (#3481)
a91133a feat(deps): update deps matching '@opentelemetry/*' (#3497)
bd017c8 chore: release main (#3451)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/auto-instrumentations-node since your current version.

Updates @opentelemetry/exporter-jaeger to 1.30.1

Release notes

Sourced from @opentelemetry/exporter-jaeger's releases.

v1.30.1

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

Changelog

Sourced from @opentelemetry/exporter-jaeger's changelog.

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

1.30.0

🚀 (Enhancement)

feat(sdk-metrics): PeriodicExportingMetricReader now flushes pending tasks at shutdown #5242

🐛 (Bug Fix)

fix(sdk-trace-base): do not load OTEL_ env vars on module load, but when needed #5233

fix(instrumentation-xhr, instrumentation-fetch): content length attributes no longer get removed with ignoreNetworkEvents: true being set #5229

1.29.0

🚀 (Enhancement)

feat(sdk-metrics): Add support for aggregation cardinality limit with a default limit of 2000. This limit can be customized via views #5128

1.28.0

🚀 (Enhancement)

feat(sdk-metrics, sdk-trace): add mergeResourceWithDefaults flag, which allows opting-out of resources getting merged with the default resource #4617

default: true (no change in behavior)

note: false will become the default behavior in the next major version in order to comply with specification requirements

feat(sdk-trace-base): add spanProcessors property in TracerConfig interface. #5138 @david-luna

🐛 (Bug Fix)

fix(sdk-metrics): await exports in PeriodicExportingMetricReader when async resource attributes have not yet settled #5119 @pichlermarc

fix(sdk-trace): performance.now() may return the same value for consecutive calls #5150 @dyladan

fix(sdk-trace-base): pass BatchSpanProcessor#forceFlush() errors on visibilitychange/pagehide to globalErrorHandler #5143 @pichlermarc

fixes a bug where switching browser tabs with a failing exporter would cause an unhandled error

1.27.0

🚀 (Enhancement)

feat: add processors for adding session.id attribute to spans and logs #4972

... (truncated)

Commits

cbc912d chore: prepare next v1.x release (#5342)
942628d [backport/v1.x] ci: make v1.x release PR workflow checkout correct branch (#5...
1fa5492 [backport/v1.x] fix(exporter-metrics-otlp-http): browser OTLPMetricExporter w...
18b33a0 [backport/v1.x] fix(sdk-metrics): don't export from PeriodicExportingMetricRe...
3acae30 [backport/v1.x] ci: make changelog workflow check v1.x (#5338)
dba373c chore: updated v1.x supported versions (#5286)
aae4468 ci: prepare release script to run on v1.x branch (#5276)
616d27a chore: prepare next release (#5274)
e524148 chore: removed circular dependency from BasicTracerProvider (#5279)
67a0e9c Update links to openmetrics to reference the v1.0.0 release (#5267)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http to 0.53.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.53.0

0.53.0

💥 Breaking Change

fix(instrumentation)!:remove unused description property from interface #4847 @blumamir

feat(exporter--otlp-)!: use transport interface in node.js exporters #4743 @pichlermarc

(user-facing) headers was intended for internal use has been removed from all exporters

(user-facing) compression was intended for internal use and has been removed from all exporters

(user-facing) hostname was intended for use in tests and is not used by any exporters, it will be removed in a future release

fix(exporter--otlp-)!: ensure User-Agent header cannot be overwritten by the user #4743 @pichlermarc

allowing overrides of the User-Agent header was not specification compliant.

feat(exporter--otlp)!: remove environment-variable specific code from browser exporters

(user-facing) removes the ability to configure browser exporters by using process.env polyfills

feat(sdk-node)!: Automatically configure logs exporter #4740

feat(exporter--otlp-)!: use transport interface in browser exporters #4895 @pichlermarc

(user-facing) protected headers property was intended for internal use has been removed from all exporters

🚀 (Enhancement)

feat(otlp-transformer): Do not limit @opentelemetry/api upper range peerDependency #4816 @mydea

feat(instrumentation-http): Allow to opt-out of instrumenting incoming/outgoing requests #4643 @mydea

feat(sampler-jaeger-remote): added support of jaeger-remote-sampler according to this spec #4534 @legalimpurity

🐛 (Bug Fix)

fix(instrumentation): ensure .setConfig() results in config.enabled defaulting to true #4941 @trentm

fix(instrumentation-http): Ensure instrumentation of http.get and https.get work when used in ESM code #4857 @trentm

fix(api-logs): align AnyValue to spec #4893 @blumamir

fix(instrumentation): remove diag.debug() message for instrumentations that do not patch modules #4925 @trentm

🏠 (Internal)

refactor: Simplify the code for the getEnv function #4799 @danstarns

refactor: remove "export *" in favor of explicit named exports #4880 @robbkidd

Packages updated:

api-events

api-logs

opentelemetry-browser-detector

opentelemetry-exporter-prometheus

opentelemetry-instrumentation-fetch

opentelemetry-instrumentation-http

opentelemetry-instrumentation-xml-http-request

opentelemetry-instrumentation

Changelog

Sourced from @opentelemetry/exporter-trace-otlp-http's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

... (truncated)

Commits

See full diff in compare view

Updates @opentelemetry/resources to 1.30.1

Release notes

Sourced from @opentelemetry/resources's releases.

v1.30.1

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

Changelog

Sourced from @opentelemetry/resources's changelog.

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

1.30.0

🚀 (Enhancement)

feat(sdk-metrics): PeriodicExportingMetricReader now flushes pending tasks at shutdown #5242

🐛 (Bug Fix)

fix(sdk-trace-base): do not load OTEL_ env vars on module load, but when needed #5233

fix(instrumentation-xhr, instrumentation-fetch): content length attributes no longer get removed with ignoreNetworkEvents: true being set #5229

1.29.0

🚀 (Enhancement)

feat(sdk-metrics): Add support for aggregation cardinality limit with a default limit of 2000. This limit can be customized via views #5128

1.28.0

🚀 (Enhancement)

feat(sdk-metrics, sdk-trace): add mergeResourceWithDefaults flag, which allows opting-out of resources getting merged with the default resource #4617

default: true (no change in behavior)

note: false will become the default behavior in the next major version in order to comply with specification requirements

feat(sdk-trace-base): add spanProcessors property in TracerConfig interface. #5138 @david-luna

🐛 (Bug Fix)

fix(sdk-metrics): await exports in PeriodicExportingMetricReader when async resource attributes have not yet settled #5119 @pichlermarc

fix(sdk-trace): performance.now() may return the same value for consecutive calls #5150 @dyladan

fix(sdk-trace-base): pass BatchSpanProcessor#forceFlush() errors on visibilitychange/pagehide to globalErrorHandler #5143 @pichlermarc

fixes a bug where switching browser tabs with a failing exporter would cause an unhandled error

1.27.0

🚀 (Enhancement)

feat: add processors for adding session.id attribute to spans and logs #4972

... (truncated)

Commits

cbc912d chore: prepare next v1.x release (#5342)
942628d [backport/v1.x] ci: make v1.x release PR workflow checkout correct branch (#5...
1fa5492 [backport/v1.x] fix(exporter-metrics-otlp-http): browser OTLPMetricExporter w...
18b33a0 [backport/v1.x] fix(sdk-metrics): don't export from PeriodicExportingMetricRe...
3acae30 [backport/v1.x] ci: make changelog workflow check v1.x (#5338)
dba373c chore: updated v1.x supported versions (#5286)
aae4468 ci: prepare release script to run on v1.x branch (#5276)
616d27a chore: prepare next release (#5274)
e524148 chore: removed circular dependency from BasicTracerProvider (#5279)
67a0e9c Update links to openmetrics to reference the v1.0.0 release (#5267)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node to 0.53.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.53.0

0.53.0

💥 Breaking Change

fix(instrumentation)!:remove unused description property from interface #4847 @blumamir

feat(exporter--otlp-)!: use transport interface in node.js exporters #4743 @pichlermarc

(user-facing) headers was intended for internal use has been removed from all exporters

(user-facing) compression was intended for internal use and has been removed from all exporters

(user-facing) hostname was intended for use in tests and is not used by any exporters, it will be removed in a future release

fix(exporter--otlp-)!: ensure User-Agent header cannot be overwritten by the user #4743 @pichlermarc

allowing overrides of the User-Agent header was not specification compliant.

feat(exporter--otlp)!: remove environment-variable specific code from browser exporters

(user-facing) removes the ability to configure browser exporters by using process.env polyfills

feat(sdk-node)!: Automatically configure logs exporter #4740

feat(exporter--otlp-)!: use transport interface in browser exporters #4895 @pichlermarc

(user-facing) protected headers property was intended for internal use has been removed from all exporters

🚀 (Enhancement)

feat(otlp-transformer): Do not limit @opentelemetry/api upper range peerDependency #4816 @mydea

feat(instrumentation-http): Allow to opt-out of instrumenting incoming/outgoing requests #4643 @mydea

feat(sampler-jaeger-remote): added support of jaeger-remote-sampler according to this spec #4534 @legalimpurity

🐛 (Bug Fix)

fix(instrumentation): ensure .setConfig() results in config.enabled defaulting to true #4941 @trentm

fix(instrumentation-http): Ensure instrumentation of http.get and https.get work when used in ESM code #4857 @trentm

fix(api-logs): align AnyValue to spec #4893 @blumamir

fix(instrumentation): remove diag.debug() message for instrumentations that do not patch modules #4925 @trentm

🏠 (Internal)

refactor: Simplify the code for the getEnv function #4799 @danstarns

refactor: remove "export *" in favor of explicit named exports #4880 @robbkidd

Packages updated:

api-events

api-logs

opentelemetry-browser-detector

opentelemetry-exporter-prometheus

opentelemetry-instrumentation-fetch

opentelemetry-instrumentation-http

opentelemetry-instrumentation-xml-http-request

opentelemetry-instrumentation

Changelog

Sourced from @opentelemetry/sdk-node's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

... (truncated)

Commits

See full diff in compare view

Updates @opentelemetry/sdk-trace-base to 1.30.1

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v1.30.1

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

1.30.1

🐛 (Bug Fix)

fix(sdk-metrics): do not export from PeriodicExportingMetricReader when there are no metrics to export. #5288 @jacksonweber

🏠 (Internal)

ci: make changelog workflow check v1.x #5338 @pichlermarc

1.30.0

🚀 (Enhancement)

feat(sdk-metrics): PeriodicExportingMetricReader now flushes pending tasks at shutdown #5242

🐛 (Bug Fix)

fix(sdk-trace-base): do not load OTEL_ env vars on module load, but when needed #5233

fix(instrumentation-xhr, instrumentation-fetch): content length attributes no longer get removed with ignoreNetworkEvents: true being set #5229

1.29.0

🚀 (Enhancement)

feat(sdk-metrics): Add support for aggregation cardinality limit with a default limit of 2000. This limit can be customized via views #5128

1.28.0

🚀 (Enhancement)

feat(sdk-metrics, sdk-trace): add mergeResourceWithDefaults flag, which allows opting-out of resources getting merged with the default resource #4617

default: true (no change in behavior)

note: false will become the default behavior in the next major version in order to comply with specification requirements

feat(sdk-trace-base): add spanProcessors property in TracerConfig interface. #5138 @david-luna

🐛 (Bug Fix)

fix(sdk-metrics): await exports in PeriodicExportingMetricReader when async resource attributes have not yet settled #5119 @pichlermarc

fix(sdk-trace): performance.now() may return the same value for consecutive calls #5150 @dyladan

fix(sdk-trace-base): pass BatchSpanProcessor#forceFlush() errors on visibilitychange/pagehide to globalErrorHandler #5143 @pichlermarc

fixes a bug where switching browser tabs with a failing exporter would cause an unhandled error

1.27.0

🚀 (Enhancement)

feat: add processors for adding session.id attribute to spans and logs #4972

... (truncated)

Commits

cbc912d chore: prepare next v1.x release (#5342)
942628d [backport/v1.x] ci: make v1.x release PR workflow checkout correct branch (#5...
1fa5492 [backport/v1.x] fix(exporter-metrics-otlp-http): browser OTLPMetricExporter w...
18b33a0 [backport/v1.x] fix(sdk-metrics): don't export from PeriodicExportingMetricRe...
3acae30 [backport/v1.x] ci: make changelog workflow check v1.x (#5338)
dba373c chore: updated v1.x supported versions (#5286)
aae4468 ci: prepare release script to run on v1.x branch (#5276)
616d27a chore: prepare next release (#5274)
e524148 chore: removed circular dependency from BasicTracerProvider (#5279)
67a0e9c Update links to openmetrics to reference the v1.0.0 release (#5267)
Additional commits viewable in compare view

Updates @opentelemetry/semantic-conventions to 1.41.1

Release notes

Sourced from @opentelemetry/semantic-conventions's releases.

semconv/v1.41.1

1.41.1

🚀 Features

Note: Semantic Conventions v1.41.0 included an issue that prevented publishing a "1.41.0" version of this package.

feat: update semantic conventions to v1.41.1 #6695 @trentm
- Semantic Conventions v1.41.1: changelog v1.41.0 | changelog v1.41.1 | latest docs
- @opentelemetry/semantic-conventions (stable) changes: 8 added exports
- @opentelemetry/semantic-conventions/incubating (unstable) changes: 2 exported values changed, 4 newly deprecated exports, 80 added exports

Stable changes in v1.41.1

ATTR_DEPLOYMENT_ENVIRONMENT_NAME              // deployment.environment.name
  DEPLOYMENT_ENVIRONMENT_NAME_VALUE_DEVELOPMENT // "development"
  DEPLOYMENT_ENVIRONMENT_NAME_VALUE_PRODUCTION  // "production"
  DEPLOYMENT_ENVIRONMENT_NAME_VALUE_STAGING     // "staging"
  DEPLOYMENT_ENVIRONMENT_NAME_VALUE_TEST        // "test"
ATTR_OTEL_EVENT_NAME                          // otel.event.name
ATTR_TELEMETRY_DISTRO_NAME                    // telemetry.distro.name
ATTR_TELEMETRY_DISTRO_VERSION                 // telemetry.distro.version

Unstable changes in v1.41.1

METRIC_K8S_CONTAINER_CPU_LIMIT_UTILIZATION   // k8s.container.cpu.limit_utilization -> k8s.container.cpu.limit.utilization
METRIC_K8S_CONTAINER_CPU_REQUEST_UTILIZATION // k8s.container.cpu.request_utilization -> k8s.container.cpu.request.utilization

METRIC_K8S_CONTAINER_CPU_LIMIT      // k8s.container.cpu.limit: Replaced by `k8s.container.cpu.limit.desired`.
METRIC_K8S_CONTAINER_CPU_REQUEST    // k8s.container.cpu.request: Replaced by `k8s.container.cpu.request.desired`.
</tr></table>

... (truncated)

Changelog

Sourced from @opentelemetry/semantic-conventions's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

... (truncated)

Commits

013c600 chore: prepare next release (#6699)
b7a0c63 feat(semantic-conventions): update semantic conventions to v1.41.1 (#6695)
774143b chore(renovate): add minimumReleaseAge to config (#6697)
e0dafe0 fix(otlp-exporter-base): remove brackets from IPv6 hostname in HTTP transport...
f804c93 chore(deps): update github/codeql-action digest to 68bde55 (#6682)
95e48e7 refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions (...
907b627 feat(sdk-node): allow startNodeSDK() without an arg (#6688)
0d15261 docs: Add SIG meeting info and welcoming language (#668...
Description has been truncated

Updates the requirements on [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-jaeger](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js), [axios](https://github.com/axios/axios), [bullmq](https://github.com/taskforcesh/bullmq), [express](https://github.com/expressjs/express), [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit), [ioredis](https://github.com/luin/ioredis), [joi](https://github.com/hapijs/joi), [mongoose](https://github.com/Automattic/mongoose), [node-vault](https://github.com/nodevault/node-vault), [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg), [openapi-to-postmanv2](https://github.com/postmanlabs/openapi-to-postman), [opossum](https://github.com/nodeshift/opossum), [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc), [xstate](https://github.com/statelyai/xstate), [nock](https://github.com/nock/nock) and [sinon](https://github.com/sinonjs/sinon) to permit the latest version. Updates `@opentelemetry/auto-instrumentations-node` from 0.50.2 to 0.77.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.77.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-jaeger` to 1.30.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.30.1) Updates `@opentelemetry/exporter-trace-otlp-http` to 0.53.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.53.0) Updates `@opentelemetry/resources` to 1.30.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.30.1) Updates `@opentelemetry/sdk-node` to 0.53.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.53.0) Updates `@opentelemetry/sdk-trace-base` to 1.30.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.30.1) Updates `@opentelemetry/semantic-conventions` to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.27.0...semconv/v1.41.1) Updates `axios` from 1.15.2 to 1.17.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.17.0) Updates `bullmq` from 5.76.4 to 5.78.1 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.76.4...v5.78.1) Updates `express` from 4.22.1 to 4.22.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md) - [Commits](expressjs/express@v4.22.1...v4.22.2) Updates `express-rate-limit` from 8.4.1 to 8.5.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.4.1...v8.5.2) Updates `ioredis` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.10.1...v5.11.1) Updates `joi` from 18.1.2 to 18.2.1 - [Commits](hapijs/joi@v18.1.2...v18.2.1) Updates `mongoose` from 8.23.1 to 8.24.0 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.23.1...8.24.0) Updates `node-vault` from 0.10.10 to 0.12.0 - [Release notes](https://github.com/nodevault/node-vault/releases) - [Commits](nodevault/node-vault@v0.10.10...v0.12.0) Updates `pg` to 8.21.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.21.0/packages/pg) Updates `openapi-to-postmanv2` to 6.1.0 - [Release notes](https://github.com/postmanlabs/openapi-to-postman/releases) - [Changelog](https://github.com/postmanlabs/openapi-to-postman/blob/develop/CHANGELOG.md) - [Commits](postmanlabs/openapi-to-postman@v6.0.1...v6.1.0) Updates `opossum` to 9.0.0 - [Release notes](https://github.com/nodeshift/opossum/releases) - [Changelog](https://github.com/nodeshift/opossum/blob/main/CHANGELOG.md) - [Commits](nodeshift/opossum@v9.0.0...v9.0.0) Updates `swagger-jsdoc` from 6.2.8 to 6.3.0 - [Release notes](https://github.com/Surnet/swagger-jsdoc/releases) - [Changelog](https://github.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md) - [Commits](Surnet/swagger-jsdoc@v6.2.8...v6.3.0) Updates `xstate` to 5.32.1 - [Release notes](https://github.com/statelyai/xstate/releases) - [Commits](https://github.com/statelyai/xstate/compare/xstate@5.31.0...xstate@5.32.1) Updates `nock` to 14.0.15 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](nock/nock@v14.0.13...v14.0.15) Updates `sinon` to 21.1.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v21.1.2...v21.1.2) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-jaeger" dependency-version: 1.30.1 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.53.0 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: "@opentelemetry/resources" dependency-version: 1.30.1 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.53.0 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 1.30.1 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.41.1 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: axios dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: bullmq dependency-version: 5.78.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: express dependency-version: 4.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: express-rate-limit dependency-version: 8.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ioredis dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: joi dependency-version: 18.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mongoose dependency-version: 8.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: node-vault dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pg dependency-version: 8.21.0 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: openapi-to-postmanv2 dependency-version: 6.1.0 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: opossum dependency-version: 9.0.0 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: swagger-jsdoc dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: xstate dependency-version: 5.32.1 dependency-type: direct:production dependency-group: minor-and-patch - dependency-name: nock dependency-version: 14.0.15 dependency-type: direct:development dependency-group: minor-and-patch - dependency-name: sinon dependency-version: 21.1.2 dependency-type: direct:development dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-26T23:23:24Z

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

dependabot · 2026-07-15T23:24:51Z