build(deps): bump the npm group with 16 updates by dependabot[bot] · Pull Request #191 · paper2/github-actions-opentelemetry

dependabot · 2026-03-01T12:06:43Z

Bumps the npm group with 16 updates:

Package	From	To
@opentelemetry/exporter-metrics-otlp-proto	`0.208.0`	`0.212.0`
@opentelemetry/exporter-trace-otlp-proto	`0.208.0`	`0.212.0`
@opentelemetry/resources	`2.2.0`	`2.5.1`
@opentelemetry/sdk-trace-base	`2.2.0`	`2.5.1`
@opentelemetry/sdk-metrics	`2.2.0`	`2.5.1`
@eslint/eslintrc	`3.3.1`	`3.3.4`
@opentelemetry/sdk-node	`0.208.0`	`0.212.0`
@opentelemetry/semantic-conventions	`1.38.0`	`1.40.0`
@typescript-eslint/eslint-plugin	`8.46.3`	`8.56.1`
@typescript-eslint/parser	`8.46.3`	`8.56.1`
@vitest/coverage-v8	`4.0.8`	`4.0.18`
@vitest/eslint-plugin	`1.4.1`	`1.6.9`
eslint-plugin-prettier	`5.5.4`	`5.5.5`
prettier	`3.6.2`	`3.8.1`
tsx	`4.20.6`	`4.21.0`
vitest	`4.0.8`	`4.0.18`

Updates @opentelemetry/exporter-metrics-otlp-proto from 0.208.0 to 0.212.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-proto's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

perf(otlp-transformer): optimize toAnyValue performance #6287 @AbhiPrasad

experimental/v0.211.0

0.211.0

💥 Breaking Changes

fix(otlp-exporter-base)!: remove xhr transport #6317 @cjihrig

(user-facing) The deprecated XHR-based transport has been removed and replaced with fetch(). This change affects users who relied on XmlHttpRequest instead of fetch() for sending headers with OTLP exports. To maintain compatibility on browsers without a fetch() implementation, include a fetch() polyfill.

chore(api-logs)!: remove ProxyLoggerProvider export #6322 @david-luna

🚀 Features

feat(sdk-logs): export event name from ConsoleLogRecordExporter #6310 @aicest

🐛 Bug Fixes

fix(sdk-logs): allow AnyValue attributes for logs and handle circular references #6210 @david-luna

based on #5765 from @alec2435

fix(browser-detector): use window feature detection to avoid false positives in Node.js 21+ and Bun #6271 @fiyinfoluwa001 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-proto from 0.208.0 to 0.212.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-proto's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

perf(otlp-transformer): optimize toAnyValue performance #6287 @AbhiPrasad

experimental/v0.211.0

0.211.0

💥 Breaking Changes

fix(otlp-exporter-base)!: remove xhr transport #6317 @cjihrig

(user-facing) The deprecated XHR-based transport has been removed and replaced with fetch(). This change affects users who relied on XmlHttpRequest instead of fetch() for sending headers with OTLP exports. To maintain compatibility on browsers without a fetch() implementation, include a fetch() polyfill.

chore(api-logs)!: remove ProxyLoggerProvider export #6322 @david-luna

🚀 Features

feat(sdk-logs): export event name from ConsoleLogRecordExporter #6310 @aicest

🐛 Bug Fixes

fix(sdk-logs): allow AnyValue attributes for logs and handle circular references #6210 @david-luna

based on #5765 from @alec2435

fix(browser-detector): use window feature detection to avoid false positives in Node.js 21+ and Bun #6271 @fiyinfoluwa001 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.2.0 to 2.5.1

Release notes

Sourced from @opentelemetry/resources's releases.

v2.5.1

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

v2.5.0

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

v2.4.0

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

v2.3.0

2.3.0

🚀 Features

... (truncated)

Changelog

Sourced from @opentelemetry/resources's changelog.

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

2.3.0

🚀 Features

feat(sdk-trace-base): implement on ending in span processor #6024 @majanjua-amzn

note: this feature is experimental and subject to change

🐛 Bug Fixes

fix(sdk-metrics): remove setImmediate usage in ConsoleMetricExporter #6199 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.2.0 to 2.5.1

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.5.1

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

v2.5.0

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

v2.4.0

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

v2.3.0

2.3.0

🚀 Features

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

2.3.0

🚀 Features

feat(sdk-trace-base): implement on ending in span processor #6024 @majanjua-amzn

note: this feature is experimental and subject to change

🐛 Bug Fixes

fix(sdk-metrics): remove setImmediate usage in ConsoleMetricExporter #6199 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-metrics from 2.2.0 to 2.5.1

Release notes

Sourced from @opentelemetry/sdk-metrics's releases.

v2.5.1

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

v2.5.0

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

v2.4.0

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

v2.3.0

2.3.0

🚀 Features

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-metrics's changelog.

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

2.3.0

🚀 Features

feat(sdk-trace-base): implement on ending in span processor #6024 @majanjua-amzn

note: this feature is experimental and subject to change

🐛 Bug Fixes

fix(sdk-metrics): remove setImmediate usage in ConsoleMetricExporter #6199 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.1 to 3.3.4

Release notes

Sourced from @eslint/eslintrc's releases.

eslintrc: v3.3.4

3.3.4 (2026-02-22)

Bug Fixes

update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)

update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

eslintrc: v3.3.3

3.3.3 (2025-11-28)

Bug Fixes

release v3.3.3 because publishing v3.3.2 failed (#211) (8aa555a)

eslintrc: v3.3.2

3.3.2 (2025-11-25)

Bug Fixes

Remove name property from all and recommended configs (#200) (344da49)

Changelog

Sourced from @eslint/eslintrc's changelog.

3.3.4 (2026-02-22)

Bug Fixes

update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)

update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

3.3.3 (2025-11-28)

Bug Fixes

release v3.3.3 because publishing v3.3.2 failed (#211) (8aa555a)

3.3.2 (2025-11-25)

Bug Fixes

Remove name property from all and recommended configs (#200) (344da49)

Commits

4c45e24 chore: release 3.3.4 🚀 (#223)
30339d0 fix: update minimatch to 3.1.3 to address security vulnerabilities (#224)
9139140 fix: update ajv to 6.14.0 to address security vulnerabilities (#221)
245ada5 docs: Update README sponsors
78b1a0e docs: Update README sponsors
df32fff docs: Update README sponsors
a62f7f5 docs: Update README sponsors
84a32c5 docs: Update README sponsors
7ab5635 docs: Update README sponsors
5e8a153 docs: Update README sponsors
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @eslint/eslintrc since your current version.

Updates @opentelemetry/sdk-node from 0.208.0 to 0.212.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

perf(otlp-transformer): optimize toAnyValue performance

Bumps the npm group with 16 updates: | Package | From | To | | --- | --- | --- | | [@opentelemetry/exporter-metrics-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.212.0` | | [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.212.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.5.1` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.5.1` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.5.1` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.1` | `3.3.4` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.212.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.40.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.3` | `8.56.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.3` | `8.56.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.8` | `4.0.18` | | [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.4.1` | `1.6.9` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.20.6` | `4.21.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.8` | `4.0.18` | Updates `@opentelemetry/exporter-metrics-otlp-proto` from 0.208.0 to 0.212.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.212.0) Updates `@opentelemetry/exporter-trace-otlp-proto` from 0.208.0 to 0.212.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.212.0) Updates `@opentelemetry/resources` from 2.2.0 to 2.5.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.5.1) Updates `@opentelemetry/sdk-trace-base` from 2.2.0 to 2.5.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.5.1) Updates `@opentelemetry/sdk-metrics` from 2.2.0 to 2.5.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.5.1) Updates `@eslint/eslintrc` from 3.3.1 to 3.3.4 - [Release notes](https://github.com/eslint/eslintrc/releases) - [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md) - [Commits](eslint/eslintrc@v3.3.1...eslintrc-v3.3.4) Updates `@opentelemetry/sdk-node` from 0.208.0 to 0.212.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.212.0) Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.40.0) Updates `@typescript-eslint/eslint-plugin` from 8.46.3 to 8.56.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.3 to 8.56.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser) Updates `@vitest/coverage-v8` from 4.0.8 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8) Updates `@vitest/eslint-plugin` from 1.4.1 to 1.6.9 - [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases) - [Commits](vitest-dev/eslint-plugin-vitest@v1.4.1...v1.6.9) Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `tsx` from 4.20.6 to 4.21.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.20.6...v4.21.0) Updates `vitest` from 4.0.8 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest) --- updated-dependencies: - dependency-name: "@opentelemetry/exporter-metrics-otlp-proto" dependency-version: 0.212.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@opentelemetry/exporter-trace-otlp-proto" dependency-version: 0.212.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@opentelemetry/resources" dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@eslint/eslintrc" dependency-version: 3.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.212.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.40.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.56.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.56.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/eslint-plugin" dependency-version: 1.6.9 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: eslint-plugin-prettier dependency-version: 5.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: tsx dependency-version: 4.21.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vitest dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm group with 16 updates#191

build(deps): bump the npm group with 16 updates#191
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-e861a78fea

dependabot bot commented on behalf of github Mar 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 1, 2026

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.211.0

0.211.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.211.0

0.211.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v2.5.1

2.5.1

🐛 Bug Fixes

🏠 Internal

v2.5.0

2.5.0

🐛 Bug Fixes

🏠 Internal

v2.4.0

2.4.0

🐛 Bug Fixes

🏠 Internal

v2.3.0

2.3.0

🚀 Features

2.5.1

🐛 Bug Fixes

🏠 Internal

2.5.0

🐛 Bug Fixes

🏠 Internal

2.4.0

🐛 Bug Fixes

🏠 Internal

2.3.0

🚀 Features

🐛 Bug Fixes

v2.5.1

2.5.1

🐛 Bug Fixes

🏠 Internal

v2.5.0

2.5.0

🐛 Bug Fixes

🏠 Internal

v2.4.0

2.4.0

🐛 Bug Fixes

🏠 Internal

v2.3.0

2.3.0

🚀 Features

2.5.1

🐛 Bug Fixes

🏠 Internal

2.5.0

🐛 Bug Fixes

🏠 Internal

2.4.0

🐛 Bug Fixes

🏠 Internal

2.3.0

🚀 Features

🐛 Bug Fixes

v2.5.1

2.5.1