build(deps): bump the dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #381 · JSE-ORG/trust-link-backend

dependabot · 2026-07-03T12:10:15Z

Bumps the dependencies group with 13 updates in the / directory:

Package	From	To
@nestjs/common	`11.1.24`	`11.1.27`
@nestjs/core	`11.1.24`	`11.1.27`
@nestjs/platform-express	`11.1.24`	`11.1.27`
@nestjs/swagger	`11.4.4`	`11.4.5`
@opentelemetry/auto-instrumentations-node	`0.76.0`	`0.78.0`
@opentelemetry/core	`2.7.1`	`2.9.0`
@opentelemetry/exporter-trace-otlp-http	`0.218.0`	`0.220.0`
@opentelemetry/resources	`2.7.1`	`2.9.0`
@opentelemetry/sdk-node	`0.218.0`	`0.220.0`
@sentry/nestjs	`10.55.0`	`10.63.0`
axios	`1.15.0`	`1.18.1`
bullmq	`5.77.6`	`5.79.2`
ioredis	`5.10.1`	`5.11.1`

Updates @nestjs/common from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/common's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
1634915 test(common): Add unit tests for cli-colors utility
380bf5c Merge pull request #17058 from Se3do/test/extend-metadata
af4542b test(common): Add unit tests for assignCustomParameterMetadata
b67aea1 test(common): Add unit tests for extendArrayMetadata
e1e4014 test(common): Tighten throw assertions in validateModuleKeys spec
6b97771 test(common): Add unit tests for validateModuleKeys
Additional commits viewable in compare view

Updates @nestjs/core from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/core's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
5c5e9ba fix(core): sse async handlers teardown issue #17128
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
0f398fd test: fix broken unit test
d152eec fix(core): post sse endpoint empty response #17098
02f8041 chore(release): publish v11.1.25 release
e2ad4e2 Update package.json
396cf81 refactor(core): avoid duplicating sse intercept call
55cd699 fix(core): preserve deferred SSE handlers
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/platform-express's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
See full diff in compare view

Updates @nestjs/swagger from 11.4.4 to 11.4.5

Release notes

Sourced from @nestjs/swagger's releases.

11.4.5

What's Changed

feat(plugin): generate additionalProperties for Record/index-signature types by @y-hsgw in nestjs/swagger#3957

fix(deps): update dependency swagger-ui-dist to v5.32.8 by @renovate[bot] in nestjs/swagger#3973

fix(deps): update dependency js-yaml to v4.2.0 [security] by @renovate[bot] in nestjs/swagger#3988

Full Changelog: nestjs/swagger@11.4.4...11.4.5

Commits

ce51962 chore(): release v11.4.5
33cc986 Merge pull request #3985 from nestjs/renovate/js-yaml-4.x
874417f fix(deps): update dependency js-yaml to v4.3.0
6cf725e Merge pull request #3990 from nestjs/renovate/oxlint-monorepo
d14de8a Merge pull request #3988 from nestjs/renovate/npm-js-yaml-vulnerability
d2706fb Merge pull request #3974 from nestjs/renovate/cimg-node-24.x
6d04dee Merge pull request #3973 from nestjs/renovate/swagger-ui-dist-5.x
631e820 chore(deps): update dependency oxlint to v1.72.0
efa8138 chore(deps): update dependency prettier to v3.9.4 (#3989)
1bb09f0 fix(deps): update dependency js-yaml to v4.2.0 [security]
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.76.0 to 0.78.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-undici bumped from ^0.29.0 to ^0.30.0

... (truncated)

Commits

8d7daea chore: release main (#3568)
6dfb532 feat(deps): update deps matching '@opentelemetry/*' (#3593)
4e52a90 chore: release main (#3524)
bd569b5 feat(deps): update deps matching '@opentelemetry/*' (#3567)
16bee31 feat: add @opentelemetry/instrumentation-host-metrics and integrate into auto...
See full diff in compare view

Updates @opentelemetry/core from 2.7.1 to 2.9.0

Release notes

Sourced from @opentelemetry/core's releases.

v2.9.0

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

Changelog

Sourced from @opentelemetry/core's changelog.

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.218.0 to 0.220.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Internal

chore(sdk-node): migrate to use the new sdk-trace package #6828 @trentm

The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @mwear

experimental/v0.219.0

0.219.0

💥 Breaking Changes

... (truncated)

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.7.1 to 2.9.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.9.0

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

Changelog

Sourced from @opentelemetry/resources's changelog.

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork

dependabot · 2026-07-03T12:10:16Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…pdates Bumps the dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.24` | `11.1.27` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.24` | `11.1.27` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.24` | `11.1.27` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.4` | `11.4.5` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.76.0` | `0.78.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.9.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` | | [@sentry/nestjs](https://github.com/getsentry/sentry-javascript) | `10.55.0` | `10.63.0` | | [axios](https://github.com/axios/axios) | `1.15.0` | `1.18.1` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.77.6` | `5.79.2` | | [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` | Updates `@nestjs/common` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/common) Updates `@nestjs/core` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/core) Updates `@nestjs/platform-express` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/platform-express) Updates `@nestjs/swagger` from 11.4.4 to 11.4.5 - [Release notes](https://github.com/nestjs/swagger/releases) - [Commits](nestjs/swagger@11.4.4...11.4.5) Updates `@opentelemetry/auto-instrumentations-node` from 0.76.0 to 0.78.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.78.0/packages/auto-instrumentations-node) Updates `@opentelemetry/core` from 2.7.1 to 2.9.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.9.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.218.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.220.0) Updates `@opentelemetry/resources` from 2.7.1 to 2.9.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.9.0) Updates `@opentelemetry/sdk-node` from 0.218.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.220.0) Updates `@sentry/nestjs` from 10.55.0 to 10.63.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.55.0...10.63.0) Updates `axios` from 1.15.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.0...v1.18.1) Updates `bullmq` from 5.77.6 to 5.79.2 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.77.6...v5.79.2) Updates `ioredis` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.10.1...v5.11.1) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 11.1.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/core" dependency-version: 11.1.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/platform-express" dependency-version: 11.1.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/swagger" dependency-version: 11.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@opentelemetry/core" dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@sentry/nestjs" dependency-version: 10.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: bullmq dependency-version: 5.79.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ioredis dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-ec5b8ee629 branch from 5269fe4 to 5520efe Compare July 6, 2026 10:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the dependencies group across 1 directory with 13 updates#381

build(deps): bump the dependencies group across 1 directory with 13 updates#381
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-ec5b8ee629

dependabot Bot commented on behalf of github Jul 3, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

11.4.5

What's Changed

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

Dependencies

0.78.0 (2026-07-03)

Features

Dependencies

v2.9.0

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.8.0

2.8.0

🚀 Features

🐛 Bug Fixes

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.8.0

🚀 Features

🐛 Bug Fixes

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.219.0

0.219.0

💥 Breaking Changes

v2.9.0

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.8.0

2.8.0

🚀 Features

🐛 Bug Fixes

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.8.0

🚀 Features

🐛 Bug Fixes

dependabot Bot commented on behalf of github Jul 3, 2026 •

edited

Loading