Skip to content

deps(backend): bump the minor-and-patch group across 1 directory with 23 updates#33

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-2a42fb4c4f
Open

deps(backend): bump the minor-and-patch group across 1 directory with 23 updates#33
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-2a42fb4c4f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the minor-and-patch group with 22 updates in the /backend directory:

Package From To
@aws-sdk/client-s3 3.957.0 3.1045.0
@aws-sdk/s3-request-presigner 3.957.0 3.1045.0
@opentelemetry/api 1.7.0 1.9.1
@opentelemetry/auto-instrumentations-node 0.40.3 0.75.0
@opentelemetry/exporter-trace-otlp-http 0.48.0 0.217.0
@opentelemetry/sdk-node 0.48.0 0.217.0
@opentelemetry/semantic-conventions 1.38.0 1.40.0
bullmq 5.66.2 5.76.7
multer 2.0.2 2.1.1
@types/multer 1.4.13 2.1.0
pdfkit 0.17.2 0.18.0
sanitize-html 2.17.0 2.17.3
@types/sanitize-html 2.16.0 2.16.1
@types/pdfkit 0.17.4 0.17.6
@typescript-eslint/eslint-plugin 8.50.1 8.59.2
@typescript-eslint/parser 8.50.1 8.59.2
@vitest/coverage-v8 4.0.16 4.1.5
eslint-plugin-prettier 5.5.4 5.5.5
prettier 3.7.4 3.8.3
supertest 7.1.4 7.2.2
@types/supertest 2.0.16 7.2.0
vitest 4.0.16 4.1.5

Updates @aws-sdk/client-s3 from 3.957.0 to 3.1045.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1045.0

3.1045.0(2026-05-07)

Documentation Changes
  • client-guardduty: This is a documentation update (1484574c)
New Features
  • clients: update client endpoints as of 2026-05-07 (81310767)
  • client-bcm-data-exports: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. (238da2c1)
  • client-invoicing: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response (60a448cb)
  • client-bedrock-agentcore: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (1e1031a7)
  • client-ec2: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. (70262433)
  • client-bedrock-agentcore-control: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (fe5861ae)
  • client-route53resolver: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. (8e6e18c6)

For list of updated packages, view updated-packages.md in assets-3.1045.0.zip

v3.1044.0

3.1044.0(2026-05-06)

New Features
  • client-securityhub: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. (772b8629)
  • client-sagemaker: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. (2be7e6b4)
  • client-glue: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. (b95d850b)
  • client-lex-models-v2: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. (01426f8e)
  • client-bedrock-agentcore-control: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. (e20f24d9)
  • client-s3: Validate outpost access point resource name (bee88a56)
  • client-mwaa: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. (3a6054ef)
  • client-imagebuilder: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. (7fc2565c)
Tests
  • scripts: include type symbols in api snapshot test (#7985) (02f86176)

For list of updated packages, view updated-packages.md in assets-3.1044.0.zip

v3.1043.0

3.1043.0(2026-05-05)

New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1044.0 (2026-05-06)

Features

  • client-s3: Validate outpost access point resource name (bee88a5)

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1042.0 (2026-05-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.957.0 to 3.1045.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1045.0

3.1045.0(2026-05-07)

Documentation Changes
  • client-guardduty: This is a documentation update (1484574c)
New Features
  • clients: update client endpoints as of 2026-05-07 (81310767)
  • client-bcm-data-exports: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. (238da2c1)
  • client-invoicing: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response (60a448cb)
  • client-bedrock-agentcore: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (1e1031a7)
  • client-ec2: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. (70262433)
  • client-bedrock-agentcore-control: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (fe5861ae)
  • client-route53resolver: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. (8e6e18c6)

For list of updated packages, view updated-packages.md in assets-3.1045.0.zip

v3.1044.0

3.1044.0(2026-05-06)

New Features
  • client-securityhub: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. (772b8629)
  • client-sagemaker: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. (2be7e6b4)
  • client-glue: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. (b95d850b)
  • client-lex-models-v2: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. (01426f8e)
  • client-bedrock-agentcore-control: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. (e20f24d9)
  • client-s3: Validate outpost access point resource name (bee88a56)
  • client-mwaa: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. (3a6054ef)
  • client-imagebuilder: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. (7fc2565c)
Tests
  • scripts: include type symbols in api snapshot test (#7985) (02f86176)

For list of updated packages, view updated-packages.md in assets-3.1044.0.zip

v3.1043.0

3.1043.0(2026-05-05)

New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1044.0 (2026-05-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1042.0 (2026-05-04)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1039.0 (2026-04-29)

... (truncated)

Commits

Updates @opentelemetry/api from 1.7.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

api/v1.9.0

1.9.0

🚀 (Enhancement)

  • feat(metrics): added synchronous gauge #4528 @​clintonb
  • feat(api): allow adding span links after span creation #4536 @​seemk
    • This change is non-breaking for end-users, but breaking for Trace SDK implmentations in accordance with the specification as new features need to be implemented.
  • feat: support node 22 #4666 @​dyladan

API v1.8.0

🚀 (Enhancement)

  • feat(api): add SugaredTracer for functions not defined in the spec #3317 @​secustor

🐛 (Bug Fix)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear

1.9.0

🚀 (Enhancement)

  • feat(instrumentation-grpc): set net.peer.name and net.peer.port on client spans #3430
  • feat(exporter-trace-otlp-proto): Add protobuf otlp trace exporter support for browser #3208 @​pkanal

🐛 (Bug Fix)

  • fix(sdk-metrics): use default Resource to comply with semantic conventions #3411 @​pichlermarc
    • Metrics exported by the SDK now contain the following resource attributes by default:
      • service.name
      • telemetry.sdk.name
      • telemetry.sdk.language
      • telemetry.sdk.version
  • fix(sdk-metrics): use Date.now() for instrument recording timestamps #3514 @​MisterSquishy
  • fix(sdk-trace): make spans resilient to clock drift #3434 @​dyladan
  • fix(selenium-tests): updated webpack version for selenium test issue #3456 @​SaumyaBhushan
  • fix(sdk-metrics): collect metrics when periodic exporting metric reader flushes #3517 @​legendecas
  • fix(sdk-metrics): fix duplicated registration of metrics for collectors #3488 @​legendecas
  • fix(core): fix precision loss in numberToHrtime #3480 @​legendecas

🏠 (Internal)

1.8.0

  • @opentelemetry/sdk-metrics has been promoted to stable
  • @opentelemetry/api-metrics has been merged into @opentelemetry/api and deprecated

💥 Breaking Change

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @opentelemetry/auto-instrumentations-node from 0.40.3 to 0.75.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.75.0

0.75.0 (2026-05-06)

Features

  • deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.33.0 to ^0.34.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-express bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.25.0 to ^0.26.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-net bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.14.0 to ^0.15.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.41.0 to ^0.42.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-router bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.26.0 to ^0.27.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.75.0 (2026-05-06)

Features

  • deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.33.0 to ^0.34.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-express bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.25.0 to ^0.26.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-net bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.14.0 to ^0.15.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.41.0 to ^0.42.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-router bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-winston bumped from ^0.60.0 to ^0.61.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/auto-instrumentations-node since your current version.


Updates @opentelemetry/exporter-trace-otlp-http from 0.48.0 to 0.217.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.217.0

0.217.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @​MikeGoldsmith
  • feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @​trentm
    • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
    • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
    • An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

  • fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @​trentm
  • fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @​trentm
  • fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @​trentm
  • fix(configuration): improve handling of enums in generated types #6659 @​trentm
  • fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @​trentm
  • fix(sampler-jaeger-remote): add missing axios dep #6656 @​trentm
  • fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @​homanp

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira
  • fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @​Maximiliano-Zeballos
  • fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @​trentm
  • fix(web-common): add limit for timeout #6601 @​maryliag
  • fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

🏠 Internal

  • test(otlp-transformer): add metrics transform benchmark #6628 @​pichlermarc
  • refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @​cjihrig

experimental/v0.215.0

0.215.0

💥 Breaking Changes

... (truncated)

Commits
  • 74cde1b chore: prepare next release (#6675)
  • e8f439a fix: handle malformed URLs in Prometheus exporter request handler (#6674)
  • ab3a2e2 feat(sdk-node, configuration): diag log handling updates for startNodeSDK(), ...
  • d5b7d1e fix(deps): update dependency axios to v1.15.2 [security] (#6670)
  • c163618 chore(deps): update github/codeql-action digest to e46ed2c (#6661)
  • ec2bfbe chore(configuration): move config generation scripts into the configuration p...
  • acc9ecd chore(configuration): cosmetic changes to generated types.ts (#6663)
  • 8f008ec chore: Move inactive members to emeritus (#6649)
  • 435431e fix(configuration): improve the technique for removing '| null' on types due ...
  • 4222024 fix(configuration): improve handling of enums in generated types (#6659)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/exporter-trace-otlp-http since your current version.


Updates @opentelemetry/sdk-node from 0.48.0 to 0.217.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.217.0

0.217.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @​MikeGoldsmith
  • feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @​trentm
    • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
    • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
    • An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

  • fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @​trentm
  • fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @​trentm
  • fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @​trentm
  • fix(configuration): improve handling of enums in generated types #6659 @​trentm
  • fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @​trentm
  • fix(sampler-jaeger-remote): add missing axios dep #6656 @​trentm
  • fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @​homanp

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira
  • fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @​Maximiliano-Zeballos
  • fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @​trentm
  • fix(web-common): add limit for timeout #6601 @​maryliag
  • fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

🏠 Internal

  • test(otlp-transformer): add metrics transform benchmark #6628 @​pichlermarc
  • refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @​cjihrig

experimental/v0.215.0

0.215.0

💥 Breaking Changes

... (truncated)

Commits
  • 74cde1b chore: prepare next release (#6675)
  • e8f439a fix: handle malformed URLs in Prometheus exporter request handler (#6674)
  • ab3a2e2 feat(sdk-node, configuration): diag log handling updates for startNodeSDK(), ...
  • d5b7d1e fix(deps): update dependency axios to v1.15.2 [security] (

@dependabot
deps(backend): bump the minor-and-patch group across 1 directory with…
d78bc3e 
… 23 updates

Bumps the minor-and-patch group with 22 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.957.0` | `3.1045.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.957.0` | `3.1045.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.7.0` | `1.9.1` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.40.3` | `0.75.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.217.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.217.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.40.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.66.2` | `5.76.7` |
| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.1.1` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `1.4.13` | `2.1.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.18.0` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.17.3` |
| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.0` | `2.16.1` |
| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.4` | `0.17.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.50.1` | `8.59.2` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.50.1` | `8.59.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.16` | `4.1.5` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.3` |
| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |
| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `2.0.16` | `7.2.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.16` | `4.1.5` |



Updates `@aws-sdk/client-s3` from 3.957.0 to 3.1045.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.957.0 to 3.1045.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/packages/s3-request-presigner)

Updates `@opentelemetry/api` from 1.7.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.7.0...v1.9.1)

Updates `@opentelemetry/auto-instrumentations-node` from 0.40.3 to 0.75.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.75.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.48.0 to 0.217.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.217.0)

Updates `@opentelemetry/sdk-node` from 0.48.0 to 0.217.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.217.0)

Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.40.0)

Updates `bullmq` from 5.66.2 to 5.76.7
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.66.2...v5.76.7)

Updates `ioredis` from 5.8.2 to 5.10.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.8.2...v5.10.1)

Updates `multer` from 2.0.2 to 2.1.1
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.0.2...v2.1.1)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `pdfkit` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.17.2...v0.18.0)

Updates `sanitize-html` from 2.17.0 to 2.17.3
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.3/packages/sanitize-html)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `@types/pdfkit` from 0.17.4 to 0.17.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pdfkit)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `@typescript-eslint/eslint-plugin` from 8.50.1 to 8.59.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.1 to 8.59.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/parser)

Updates `@vitest/coverage-v8` from 4.0.16 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5)

Updates `prettier` from 3.7.4 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.3)

Updates `supertest` from 7.1.4 to 7.2.2
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.1.4...v7.2.2)

Updates `@types/supertest` from 2.0.16 to 7.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest)

Updates `vitest` from 4.0.16 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1045.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1045.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.217.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.217.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bullmq
  dependency-version: 5.76.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ioredis
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: multer
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: pdfkit
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: "@types/pdfkit"
  dependency-version: 0.17.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: supertest
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/supertest"
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 11, 2026

Labels

The following labels could not be found: backend, dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants