Bump the npm-production-dependencies group across 2 directories with 35 updates by dependabot[bot] · Pull Request #195 · AlanFinnie/OpenTelemetryDemo

dependabot · 2026-06-23T09:58:52Z

Bumps the npm-production-dependencies group with 32 updates in the /src/frontend directory:

Package	From	To
@bufbuild/protobuf	`2.11.0`	`2.12.1`
@grpc/grpc-js	`1.14.3`	`1.14.4`
@openfeature/flagd-provider	`0.15.0`	`0.16.0`
@openfeature/react-sdk	`1.2.1`	`1.4.1`
@opentelemetry/auto-instrumentations-node	`0.72.0`	`0.77.0`
@opentelemetry/auto-instrumentations-web	`0.59.0`	`0.64.0`
@opentelemetry/context-zone	`2.6.1`	`2.8.0`
@opentelemetry/core	`2.6.1`	`2.8.0`
@opentelemetry/exporter-metrics-otlp-grpc	`0.214.0`	`0.219.0`
@opentelemetry/exporter-trace-otlp-grpc	`0.214.0`	`0.219.0`
@opentelemetry/exporter-trace-otlp-http	`0.214.0`	`0.219.0`
@opentelemetry/instrumentation	`0.214.0`	`0.219.0`
@opentelemetry/opentelemetry-browser-detector	`0.214.0`	`0.219.0`
@opentelemetry/resource-detector-alibaba-cloud	`0.33.4`	`0.34.0`
@opentelemetry/resource-detector-aws	`2.14.0`	`2.19.0`
@opentelemetry/resource-detector-container	`0.8.5`	`0.8.10`
@opentelemetry/resource-detector-gcp	`0.49.0`	`0.54.0`
@opentelemetry/resources	`2.6.1`	`2.8.0`
@opentelemetry/sdk-metrics	`2.6.1`	`2.8.0`
@opentelemetry/sdk-node	`0.214.0`	`0.219.0`
@opentelemetry/sdk-trace-base	`2.6.1`	`2.8.0`
@opentelemetry/sdk-trace-node	`2.6.1`	`2.8.0`
@opentelemetry/sdk-trace-web	`2.6.1`	`2.8.0`
@tanstack/react-query	`5.97.0`	`5.101.0`
dotenv	`17.4.1`	`17.4.2`
dotenv-expand	`12.0.3`	`13.0.0`
next	`16.2.3`	`16.2.9`
react	`19.2.5`	`19.2.7`
react-dom	`19.2.5`	`19.2.7`
sharp	`0.34.5`	`0.35.2`
styled-components	`6.4.0`	`6.4.2`
uuid	`13.0.0`	`14.0.1`

Bumps the npm-production-dependencies group with 17 updates in the /src/payment directory:

Package	From	To
@grpc/grpc-js	`1.14.3`	`1.14.4`
@openfeature/flagd-provider	`0.15.0`	`0.16.0`
@opentelemetry/auto-instrumentations-node	`0.72.0`	`0.77.0`
@opentelemetry/core	`2.6.1`	`2.8.0`
@opentelemetry/exporter-metrics-otlp-grpc	`0.214.0`	`0.219.0`
@opentelemetry/exporter-trace-otlp-grpc	`0.214.0`	`0.219.0`
@opentelemetry/resource-detector-alibaba-cloud	`0.33.4`	`0.34.0`
@opentelemetry/resource-detector-aws	`2.14.0`	`2.19.0`
@opentelemetry/resource-detector-container	`0.8.5`	`0.8.10`
@opentelemetry/resource-detector-gcp	`0.49.0`	`0.54.0`
@opentelemetry/resources	`2.6.1`	`2.8.0`
@opentelemetry/sdk-metrics	`2.6.1`	`2.8.0`
@opentelemetry/sdk-node	`0.214.0`	`0.219.0`
uuid	`13.0.0`	`14.0.1`
@grpc/proto-loader	`0.8.0`	`0.8.1`
@openfeature/server-sdk	`1.20.2`	`1.22.0`
@opentelemetry/instrumentation-runtime-node	`0.27.0`	`0.32.0`

Updates @bufbuild/protobuf from 2.11.0 to 2.12.1

Release notes

Sourced from @bufbuild/protobuf's releases.

v2.12.1

What's Changed

Add GitHub publish workflow with trusted publishing by @ajeetdsouza in bufbuild/protobuf-es#1406

Docs: fix buf logo with dark mode by @sudorandom in bufbuild/protobuf-es#1417

Fix dual package type hazard by @timostamm in bufbuild/protobuf-es#1421

Add recursion limit to fromBinary and fromJson by @timostamm in bufbuild/protobuf-es#1436

Apply recursion limit to BinaryReader.skip by @timostamm in bufbuild/protobuf-es#1441

Fix -0.0 serialization for implicit-presence float and double fields by @timostamm in bufbuild/protobuf-es#1443

Fix open enum range checks by @timostamm in bufbuild/protobuf-es#1442

Reject duplicate keys when parsing JSON by @timostamm in bufbuild/protobuf-es#1446

New Contributors

@ajeetdsouza made their first contribution in bufbuild/protobuf-es#1406

@sudorandom made their first contribution in bufbuild/protobuf-es#1417

Full Changelog: bufbuild/protobuf-es@v2.12.0...v2.12.1

v2.12.0

What's Changed

Gracefully handle Number for BigInt fields by @timostamm in bufbuild/protobuf-es#1346

Support exactOptionalPropertyTypes by @haines in bufbuild/protobuf-es#1371

Fix UTF-8 validation for proto3 and edition feature utf8_validation by @emcfarlane in bufbuild/protobuf-es#1386

Fix binary tag parse validation to reject overlong values by @emcfarlane in bufbuild/protobuf-es#1387

Fix Any JSON encoding for messages without a custom JSON representation by @emcfarlane in bufbuild/protobuf-es#1388

Update to protocolbuffers/protobuf v34.0 by @emcfarlane in bufbuild/protobuf-es#1385

Update conformance tests to protocolbuffers/protobuf v34.0 by @emcfarlane in bufbuild/protobuf-es#1391

New Contributors

@emcfarlane made their first contribution in bufbuild/protobuf-es#1386

Full Changelog: bufbuild/protobuf-es@v2.11.0...v2.12.0

Commits

5dc9c95 Release 2.12.1 (#1448)
054cec8 Bump protoc from 34.0.0 to 34.1.0 (#1431)
150eeaf Reject duplicate keys when parsing JSON (#1446)
9bc5438 Fix open enum range checks (#1442)
579f79b Fix -0.0 serialization for implicit-presence float and double fields (#1443)
00abde8 Propagate BUF_BIGINT_DISABLE to Turborepo test tasks (#1444)
da672c8 Apply recursion limit to BinaryReader.skip (#1441)
33932ad Remove redundant npmignore (#1438)
564d6c0 Migrate protobuf build to tshy (#1435)
55278ee Add recursion limit to fromBinary and fromJson (#1436)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @bufbuild/protobuf since your current version.

Updates @grpc/grpc-js from 1.14.3 to 1.14.4

Release notes

Sourced from @grpc/grpc-js's releases.

@grpc/grpc-js 1.14.4

Fix a bug that could cause servers to crash when handling malformed requests (advisory GHSA-5375-pq7m-f5r2)

Fix a bug that could cause clients and servers to crash when handling malformed compressed messages (advisory GHSA-99f4-grh7-6pcq)

Commits

a380735 Merge pull request #3052 from murgatroid99/grpc-js_1.14.4
5b8d37b Merge commit from fork
6a97456 Merge commit from fork
e5e0b1d grpc-js: Bump version to 1.14.4
5029a26 Make compression error a static string
2fe55fd Fix crashes when receiving malformed compressed data
234f917 Fix server crash when handling invalid requests
acef8d4 Merge pull request #3043 from murgatroid99/rbac_types_change_fix_1.14
4f3c58f grpc-js-xds: Update RBAC code to handle Node type change, pin @types/node
See full diff in compare view

Updates @openfeature/flagd-provider from 0.15.0 to 0.16.0

Release notes

Sourced from @openfeature/flagd-provider's releases.

flagd-provider: v0.16.0

0.16.0 (2026-06-02)

⚠ BREAKING CHANGES

DISABLED is a successful evaluation (still defaults) (#1558)

✨ New Features

DISABLED is a successful evaluation (still defaults) (#1558) (198c928)

flagd-provider: v0.15.1

0.15.1 (2026-05-01)

🐛 Bug Fixes

various custom operator conformance fixes (#1519) (12cdd7f)

Changelog

Sourced from @openfeature/flagd-provider's changelog.

0.16.0 (2026-06-02)

⚠ BREAKING CHANGES

DISABLED is a successful evaluation (still defaults) (#1558)

✨ New Features

DISABLED is a successful evaluation (still defaults) (#1558) (198c928)

0.15.1 (2026-05-01)

🐛 Bug Fixes

various custom operator conformance fixes (#1519) (12cdd7f)

Commits

c18b1de chore(main): release flagd-provider 0.16.0 (#1560)
c0defa4 chore(main): release flagd-core 4.0.0 (#1561)
198c928 feat!: DISABLED is a successful evaluation (still defaults) (#1558)
f8d0d55 chore(main): release flagd-provider 0.15.1 (#1539)
962062e chore: migrate to latest nx (#1542)
12cdd7f fix: various custom operator conformance fixes (#1519)
c2b61ee chore: run Prettier on commit + fix existing issues (#1511)
See full diff in compare view

Updates @openfeature/react-sdk from 1.2.1 to 1.4.1

Release notes

Sourced from @openfeature/react-sdk's releases.

web-sdk: v1.4.1

1.4.1 (2025-02-07)

🐛 Bug Fixes

msg missing when providers return err resolutions (#1134) (bc9f6e4)

🧹 Chore

update core peer (8bbd43e)

react-sdk: v1.4.1

1.4.1 (2026-06-19)

🐛 Bug Fixes

redundant re-renders with unstable inputs (#1420) (45cf9bb)

core: v1.4.0

1.4.0 (2024-08-28)

✨ New Features

updated the Metadata type to allow for custom properties (#975) (16b0d74)

web-sdk: v1.4.0

1.4.0 (2024-12-18)

⚠ BREAKING CHANGES

The signature of the finally hook stage has been changed. The signature now includes the evaluation details, as per the OpenFeature specification. Note that since hooks are still experimental, this does not constitute a change requiring a new major version. To migrate, update any hook that implements the finally stage to accept evaluation details as the second argument.

add evaluation details to finally hook (#1087) (2135254)

✨ New Features

add evaluation details to finally hook (#1087) (2135254)

📚 Documentation

fix comment in README for Hook’s after method (#1102) (ba8d1ae)

🔄 Refactoring

... (truncated)

Commits

326e5d6 chore(main): release js-sdk 1.4.1 (#515)
a1c7966 chore: release main (#511)
88dbec0 chore(main): release shared 0.0.9 (#510)
c815bc8 fix: provider js-doc improvments (#506)
9aca1cd chore(main): release web-sdk 0.3.8-experimental (#494)
1ab0cc6 fix: onContextChanged not running for named providers (#491)
25f69cf chore(deps): update jest monorepo (#499)
fcec206 chore(main): release js-sdk 1.4.0 (#495)
a21f004 chore(main): release shared 0.0.8 (#496)
0be9c5d fix: race adding handler during init (#501)
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.72.0 to 0.77.0

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.77.0 (2026-06-11)

Features

add @opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0

@opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-tedious bumped from ^0.37.0 to ^0.38.0

... (truncated)

Commits

4e52a90 chore: release main (#3524)
bd569b5 feat(deps): update deps matching '@opentelemetry/*' (#3567)
16bee31 feat: add @opentelemetry/instrumentation-host-metrics and integrate into auto...
15ef750 chore: release main (#3508)
e26a90a feat(deps): update deps matching '@opentelemetry/*' (#3523)
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-web from 0.59.0 to 0.64.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-web's releases.

instrumentation-document-load: v0.64.0

0.64.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-winston: v0.63.0

0.63.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-winston: use Logs API exception field when translating winston error records (#3441) (1940b77)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/winston-transport bumped from ^0.28.0 to ^0.29.0

instrumentation-router: v0.63.0

0.63.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Bug Fixes

instrumentation-router: preserve baggage across next() for Express v5 (#3528) (911cb51)

instrumentation-restify: v0.64.0

0.64.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-net: v0.63.0

0.63.0 (2026-06-11)

Features

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-web's changelog.

0.64.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-document-load bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-user-interaction bumped from ^0.62.0 to ^0.63.0

0.63.0 (2026-05-13)

Features

deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-document-load bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-user-interaction bumped from ^0.61.0 to ^0.62.0

0.62.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-document-load bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-user-interaction bumped from ^0.60.0 to ^0.61.0

0.61.0 (2026-04-29)

Features

... (truncated)

Commits

b68fb6d chore: release main (#3498)
e1ef3d1 feat(deps): update deps matching '@opentelemetry/*' (#3507)
03ed3a3 chore: release main (#3481)
a91133a feat(deps): update deps matching '@opentelemetry/*' (#3497)
bd017c8 chore: release main (#3451)
8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
36a030c chore: switch to short license header (#3476)
ed97091 chore: release main (#3415)
c8df394 feat(deps): update deps matching '@opentelemetry/*' (#3450)
39f08c3 chore: release main (#3410)
Additional commits viewable in compare view

Updates @opentelemetry/context-zone from 2.6.1 to 2.8.0

Release notes

Sourced from @opentelemetry/context-zone's releases.

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

Changelog

Sourced from @opentelemetry/context-zone's changelog.

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/core from 2.6.1 to 2.8.0

Release notes

Sourced from @opentelemetry/core's releases.

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

Changelog

Sourced from @opentelemetry/core's changelog.

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)

…35 updates Bumps the npm-production-dependencies group with 32 updates in the /src/frontend directory: | Package | From | To | | --- | --- | --- | | [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.11.0` | `2.12.1` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` | | [@openfeature/flagd-provider](https://github.com/open-feature/js-sdk-contrib/tree/HEAD/libs/providers/flagd) | `0.15.0` | `0.16.0` | | [@openfeature/react-sdk](https://github.com/open-feature/js-sdk) | `1.2.1` | `1.4.1` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.72.0` | `0.77.0` | | [@opentelemetry/auto-instrumentations-web](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-web) | `0.59.0` | `0.64.0` | | [@opentelemetry/context-zone](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/opentelemetry-browser-detector](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/resource-detector-alibaba-cloud](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-alibaba-cloud) | `0.33.4` | `0.34.0` | | [@opentelemetry/resource-detector-aws](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-aws) | `2.14.0` | `2.19.0` | | [@opentelemetry/resource-detector-container](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-container) | `0.8.5` | `0.8.10` | | [@opentelemetry/resource-detector-gcp](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-gcp) | `0.49.0` | `0.54.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.97.0` | `5.101.0` | | [dotenv](https://github.com/motdotla/dotenv) | `17.4.1` | `17.4.2` | | [dotenv-expand](https://github.com/motdotla/dotenv-expand) | `12.0.3` | `13.0.0` | | [next](https://github.com/vercel/next.js) | `16.2.3` | `16.2.9` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.7` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.7` | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.2` | | [styled-components](https://github.com/styled-components/styled-components) | `6.4.0` | `6.4.2` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` | Bumps the npm-production-dependencies group with 17 updates in the /src/payment directory: | Package | From | To | | --- | --- | --- | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` | | [@openfeature/flagd-provider](https://github.com/open-feature/js-sdk-contrib/tree/HEAD/libs/providers/flagd) | `0.15.0` | `0.16.0` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.72.0` | `0.77.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [@opentelemetry/resource-detector-alibaba-cloud](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-alibaba-cloud) | `0.33.4` | `0.34.0` | | [@opentelemetry/resource-detector-aws](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-aws) | `2.14.0` | `2.19.0` | | [@opentelemetry/resource-detector-container](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-container) | `0.8.5` | `0.8.10` | | [@opentelemetry/resource-detector-gcp](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/resource-detector-gcp) | `0.49.0` | `0.54.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.6.1` | `2.8.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.214.0` | `0.219.0` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.1` | | [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.8.0` | `0.8.1` | | [@openfeature/server-sdk](https://github.com/open-feature/js-sdk) | `1.20.2` | `1.22.0` | | [@opentelemetry/instrumentation-runtime-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-runtime-node) | `0.27.0` | `0.32.0` | Updates `@bufbuild/protobuf` from 2.11.0 to 2.12.1 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.12.1/packages/protobuf) Updates `@grpc/grpc-js` from 1.14.3 to 1.14.4 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.3...@grpc/grpc-js@1.14.4) Updates `@openfeature/flagd-provider` from 0.15.0 to 0.16.0 - [Release notes](https://github.com/open-feature/js-sdk-contrib/releases) - [Changelog](https://github.com/open-feature/js-sdk-contrib/blob/main/libs/providers/flagd/CHANGELOG.md) - [Commits](https://github.com/open-feature/js-sdk-contrib/commits/flagd-provider-v0.16.0/libs/providers/flagd) Updates `@openfeature/react-sdk` from 1.2.1 to 1.4.1 - [Release notes](https://github.com/open-feature/js-sdk/releases) - [Commits](open-feature/js-sdk@web-sdk-v1.2.1...js-sdk-v1.4.1) Updates `@opentelemetry/auto-instrumentations-node` from 0.72.0 to 0.77.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.77.0/packages/auto-instrumentations-node) Updates `@opentelemetry/auto-instrumentations-web` from 0.59.0 to 0.64.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-web/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.64.0/packages/auto-instrumentations-web) Updates `@opentelemetry/context-zone` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/core` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/instrumentation` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/opentelemetry-browser-detector` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/resource-detector-alibaba-cloud` from 0.33.4 to 0.34.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-alibaba-cloud/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/host-metrics-v0.34.0/packages/resource-detector-alibaba-cloud) Updates `@opentelemetry/resource-detector-aws` from 2.14.0 to 2.19.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-aws/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/resource-detector-aws-v2.19.0/packages/resource-detector-aws) Updates `@opentelemetry/resource-detector-container` from 0.8.5 to 0.8.10 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-container/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/resource-detector-container-v0.8.10/packages/resource-detector-container) Updates `@opentelemetry/resource-detector-gcp` from 0.49.0 to 0.54.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-gcp/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.54.0/packages/resource-detector-gcp) Updates `@opentelemetry/resources` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-metrics` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-node` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/sdk-trace-base` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-trace-node` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-trace-web` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@tanstack/react-query` from 5.97.0 to 5.101.0 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.0/packages/react-query) Updates `dotenv` from 17.4.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.1...v17.4.2) Updates `dotenv-expand` from 12.0.3 to 13.0.0 - [Changelog](https://github.com/motdotla/dotenv-expand/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv-expand@v12.0.3...v13.0.0) Updates `next` from 16.2.3 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.3...v16.2.9) Updates `react` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `sharp` from 0.34.5 to 0.35.2 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.2) Updates `styled-components` from 6.4.0 to 6.4.2 - [Release notes](https://github.com/styled-components/styled-components/releases) - [Commits](https://github.com/styled-components/styled-components/compare/styled-components@6.4.0...styled-components@6.4.2) Updates `uuid` from 13.0.0 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.1) Updates `@grpc/grpc-js` from 1.14.3 to 1.14.4 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.3...@grpc/grpc-js@1.14.4) Updates `@openfeature/flagd-provider` from 0.15.0 to 0.16.0 - [Release notes](https://github.com/open-feature/js-sdk-contrib/releases) - [Changelog](https://github.com/open-feature/js-sdk-contrib/blob/main/libs/providers/flagd/CHANGELOG.md) - [Commits](https://github.com/open-feature/js-sdk-contrib/commits/flagd-provider-v0.16.0/libs/providers/flagd) Updates `@opentelemetry/auto-instrumentations-node` from 0.72.0 to 0.77.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.77.0/packages/auto-instrumentations-node) Updates `@opentelemetry/core` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `@opentelemetry/resource-detector-alibaba-cloud` from 0.33.4 to 0.34.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-alibaba-cloud/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/host-metrics-v0.34.0/packages/resource-detector-alibaba-cloud) Updates `@opentelemetry/resource-detector-aws` from 2.14.0 to 2.19.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-aws/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/resource-detector-aws-v2.19.0/packages/resource-detector-aws) Updates `@opentelemetry/resource-detector-container` from 0.8.5 to 0.8.10 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-container/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/resource-detector-container-v0.8.10/packages/resource-detector-container) Updates `@opentelemetry/resource-detector-gcp` from 0.49.0 to 0.54.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/resource-detector-gcp/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.54.0/packages/resource-detector-gcp) Updates `@opentelemetry/resources` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-metrics` from 2.6.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.1...v2.8.0) Updates `@opentelemetry/sdk-node` from 0.214.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.214.0...experimental/v0.219.0) Updates `uuid` from 13.0.0 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.1) Updates `@grpc/proto-loader` from 0.8.0 to 0.8.1 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/proto-loader@0.8.0...@grpc/proto-loader@0.8.1) Updates `@openfeature/server-sdk` from 1.20.2 to 1.22.0 - [Release notes](https://github.com/open-feature/js-sdk/releases) - [Commits](open-feature/js-sdk@server-sdk-v1.20.2...server-sdk-v1.22.0) Updates `@opentelemetry/instrumentation-runtime-node` from 0.27.0 to 0.32.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-runtime-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/host-metrics-v0.32.0/packages/instrumentation-runtime-node) --- updated-dependencies: - dependency-name: "@bufbuild/protobuf" dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@grpc/grpc-js" dependency-version: 1.14.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: "@openfeature/flagd-provider" dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@openfeature/react-sdk" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-web" dependency-version: 0.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/context-zone" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/opentelemetry-browser-detector" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-alibaba-cloud" dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-aws" dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-container" dependency-version: 0.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-gcp" dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-trace-web" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.101.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: dotenv-expand dependency-version: 13.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production-dependencies - dependency-name: next dependency-version: 16.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: sharp dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: styled-components dependency-version: 6.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production-dependencies - dependency-name: "@grpc/grpc-js" dependency-version: 1.14.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: "@openfeature/flagd-provider" dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-alibaba-cloud" dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-aws" dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-container" dependency-version: 0.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resource-detector-gcp" dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-production-dependencies - dependency-name: "@grpc/proto-loader" dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production-dependencies - dependency-name: "@openfeature/server-sdk" dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies - dependency-name: "@opentelemetry/instrumentation-runtime-node" dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-24T09:58:09Z

Superseded by #200.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 23, 2026

dependabot Bot mentioned this pull request Jun 23, 2026

Bump the npm-production-dependencies group across 2 directories with 35 updates #192

Closed

dependabot Bot closed this Jun 24, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/src/frontend/npm-production-dependencies-4f15b89c8d branch June 24, 2026 09:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm-production-dependencies group across 2 directories with 35 updates#195

Bump the npm-production-dependencies group across 2 directories with 35 updates#195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/frontend/npm-production-dependencies-4f15b89c8d

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.12.1

What's Changed

New Contributors

v2.12.0

What's Changed

New Contributors

@​grpc/grpc-js 1.14.4

flagd-provider: v0.16.0

0.16.0 (2026-06-02)

⚠ BREAKING CHANGES

✨ New Features

flagd-provider: v0.15.1

0.15.1 (2026-05-01)

🐛 Bug Fixes

0.16.0 (2026-06-02)

⚠ BREAKING CHANGES

✨ New Features

0.15.1 (2026-05-01)

🐛 Bug Fixes

web-sdk: v1.4.1

1.4.1 (2025-02-07)

🐛 Bug Fixes

🧹 Chore

react-sdk: v1.4.1

1.4.1 (2026-06-19)

🐛 Bug Fixes

core: v1.4.0

1.4.0 (2024-08-28)

✨ New Features

web-sdk: v1.4.0

1.4.0 (2024-12-18)

⚠ BREAKING CHANGES

✨ New Features

📚 Documentation

🔄 Refactoring

0.77.0 (2026-06-11)

Features

Dependencies

instrumentation-document-load: v0.64.0

0.64.0 (2026-06-11)

Features

instrumentation-winston: v0.63.0

0.63.0 (2026-06-11)

Features

Dependencies

instrumentation-router: v0.63.0

0.63.0 (2026-06-11)

Features

Bug Fixes

instrumentation-restify: v0.64.0

0.64.0 (2026-06-11)

Features

instrumentation-net: v0.63.0

0.63.0 (2026-06-11)

Features

0.64.0 (2026-06-11)

Features

Dependencies

0.63.0 (2026-05-13)

Features

Dependencies

0.62.0 (2026-05-06)

Features

Dependencies

0.61.0 (2026-04-29)

Features

v2.8.0

2.8.0

🚀 Features

🐛 Bug Fixes

v2.7.1

2.7.1

🐛 Bug Fixes

🏠 Internal

v2.7.0

2.7.0

🚀 Features

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading

`@grpc/grpc-js` 1.14.4