feat(deps): Bump the opentelemetry group across 1 directory with 6 updates by dependabot[bot] · Pull Request #20036 · getsentry/sentry-javascript

dependabot · 2026-03-30T09:06:57Z

Bumps the opentelemetry group with 6 updates in the / directory:

Package	From	To
@opentelemetry/api	`1.9.0`	`1.9.1`
@opentelemetry/core	`2.6.0`	`2.6.1`
@opentelemetry/context-async-hooks	`2.6.0`	`2.6.1`
@opentelemetry/resources	`2.6.0`	`2.6.1`
@opentelemetry/sdk-trace-base	`2.6.0`	`2.6.1`
@opentelemetry/exporter-trace-otlp-http	`0.213.0`	`0.214.0`

Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

fix(api): prioritize esnext export condition as it is more specific #5458

fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395

fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @overbalance

fix(diag): change types in DiagComponentLogger from any to unknown#5478 @loganrosen

fix(api): re-introduce fallback chain for global utils #6523 @pichlermarc

🏠 (Internal)

refactor(api): refactor to avoid circular deps by merging observable types into Metric.ts #6441 @pichlermarc

refactor(api): remove "export *" in favor of explicit named exports #4880 @robbkidd

chore: enable tsconfig isolatedModules #5697 @legendecas

chore: disallow constructor parameter property syntax #6187 @legendecas

refactor(api): remove platform-specific globalThis, use globalThis directly #6208 @overbalance

chore(api): mark ProxyTracerProvider as deprecated #6328 @cjihrig

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(api): improve isValidSpanId, isValidTraceId performance #5714 @seemk

Changelog

Sourced from @opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

fix: avoid grpc types dependency #3551 @flarna

fix(otlp-proto-exporter-base): Match Accept header with Content-Type in the proto exporter #3562 @scheler

fix: include tracestate in export #3569 @flarna

🏠 (Internal)

chore: fix cross project links and missing implicitly exported types #3533 @legendecas

feat(sdk-metrics): add exponential histogram mapping functions #3504 @mwear

Commits

279458e Release 1.9.1 / 0.35.1 (#3573)
4978743 fix(http): remove outgoing headers normalization (#3557)
d1f9594 chore(deps): update dependency rimraf to v4 (#3532)
e0abcc0 fix: remove JSON syntax error and regenerate tsconfig files (#3566)
a90c558 fix(sdk-node): register instrumentations early (#3502)
5b070b8 fix: include TraceState in trace exports (#3569)
dcb09b7 chore(deps): update dependency gh-pages to v5 (#3571)
3bc93a9 feat: exponential histogram - part 1 - mapping functions (#3504)
3670071 fix: avoid grpc types dependency (#3551)
b5ef0e4 chore: fix proto generation (#3567)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @opentelemetry/api since your current version.

Updates @opentelemetry/core from 2.6.0 to 2.6.1

Release notes

Sourced from @opentelemetry/core's releases.

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Changelog

Sourced from @opentelemetry/core's changelog.

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Commits

7e74509 chore: prepare next release (#6510)
c846919 fix(instrumentation-fetch): do not modify the returned type of fetch (#6521)
99fb3fb fix(api): re-introduce fallback chain for global utils (#6523)
b842717 test(bundlers): add node webpack tests, expand edge coverage, assert known pr...
b5a6b12 fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base de...
dc93ed4 perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance (#6516)
e9831e7 perf(sdk-trace-base): avoid Object.entries in Span.setAttributes (#6514)
d56af69 chore(deps): lock file maintenance (#6517)
f3a10ab chore(deps): update github/codeql-action digest to 3869755 (#6513)
2f73776 chore(deps): update github/codeql-action digest to c6f9311 (#6511)
Additional commits viewable in compare view

Updates @opentelemetry/context-async-hooks from 2.6.0 to 2.6.1

Release notes

Sourced from @opentelemetry/context-async-hooks's releases.

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Changelog

Sourced from @opentelemetry/context-async-hooks's changelog.

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Commits

7e74509 chore: prepare next release (#6510)
c846919 fix(instrumentation-fetch): do not modify the returned type of fetch (#6521)
99fb3fb fix(api): re-introduce fallback chain for global utils (#6523)
b842717 test(bundlers): add node webpack tests, expand edge coverage, assert known pr...
b5a6b12 fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base de...
dc93ed4 perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance (#6516)
e9831e7 perf(sdk-trace-base): avoid Object.entries in Span.setAttributes (#6514)
d56af69 chore(deps): lock file maintenance (#6517)
f3a10ab chore(deps): update github/codeql-action digest to 3869755 (#6513)
2f73776 chore(deps): update github/codeql-action digest to c6f9311 (#6511)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.6.0 to 2.6.1

Release notes

Sourced from @opentelemetry/resources's releases.

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Changelog

Sourced from @opentelemetry/resources's changelog.

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Commits

7e74509 chore: prepare next release (#6510)
c846919 fix(instrumentation-fetch): do not modify the returned type of fetch (#6521)
99fb3fb fix(api): re-introduce fallback chain for global utils (#6523)
b842717 test(bundlers): add node webpack tests, expand edge coverage, assert known pr...
b5a6b12 fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base de...
dc93ed4 perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance (#6516)
e9831e7 perf(sdk-trace-base): avoid Object.entries in Span.setAttributes (#6514)
d56af69 chore(deps): lock file maintenance (#6517)
f3a10ab chore(deps): update github/codeql-action digest to 3869755 (#6513)
2f73776 chore(deps): update github/codeql-action digest to c6f9311 (#6511)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.6.0 to 2.6.1

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

Commits

7e74509 chore: prepare next release (#6510)
c846919 fix(instrumentation-fetch): do not modify the returned type of fetch (#6521)
99fb3fb fix(api): re-introduce fallback chain for global utils (#6523)
b842717 test(bundlers): add node webpack tests, expand edge coverage, assert known pr...
b5a6b12 fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base de...
dc93ed4 perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance (#6516)
e9831e7 perf(sdk-trace-base): avoid Object.entries in Span.setAttributes (#6514)
d56af69 chore(deps): lock file maintenance (#6517)
f3a10ab chore(deps): update github/codeql-action digest to 3869755 (#6513)
2f73776 chore(deps): update github/codeql-action digest to c6f9311 (#6511)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.213.0 to 0.214.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.214.0

0.214.0

💥 Breaking Changes

feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @maryliag

refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

feat(configuration): add sampler configuration parsing support #6409 @MikeGoldsmith

feat(configuration): add resource detection parsing #6435 @MikeGoldsmith

feat(configuration): export interfaces required in other packages #6462 @maryliag

feat(configuration): set MeterProvider on sdk start #6463 @maryliag

feat(configuration): export interfaces required in other packages #6507 @maryliag

🐛 Bug Fixes

fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @overbalance

fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @overbalance

fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @dyladan

fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @gotgenes

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

Commits

7e74509 chore: prepare next release (#6510)
c846919 fix(instrumentation-fetch): do not modify the returned type of fetch (#6521)
99fb3fb fix(api): re-introduce fallback chain for global utils (#6523)
b842717 test(bundlers): add node webpack tests, expand edge coverage, assert known pr...
b5a6b12 fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base de...
dc93ed4 perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance (#6516)
e9831e7 perf(sdk-trace-base): avoid Object.entries in Span.setAttributes (#6514)
d56af69 chore(deps): lock file maintenance (#6517)
f3a10ab chore(deps): update github/codeql-action digest to 3869755 (#6513)
2f73776 chore(deps): update github/codeql-action digest to c6f9311 (#6511)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the opentelemetry group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.6.0` | `2.6.1` | | [@opentelemetry/context-async-hooks](https://github.com/open-telemetry/opentelemetry-js) | `2.6.0` | `2.6.1` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.6.0` | `2.6.1` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.6.0` | `2.6.1` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.213.0` | `0.214.0` | Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `@opentelemetry/core` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.0...v2.6.1) Updates `@opentelemetry/context-async-hooks` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.0...v2.6.1) Updates `@opentelemetry/resources` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.0...v2.6.1) Updates `@opentelemetry/sdk-trace-base` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.6.0...v2.6.1) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.213.0 to 0.214.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.213.0...experimental/v0.214.0) --- updated-dependencies: - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: opentelemetry - dependency-name: "@opentelemetry/core" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: opentelemetry - dependency-name: "@opentelemetry/context-async-hooks" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: opentelemetry - dependency-name: "@opentelemetry/resources" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: opentelemetry - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: opentelemetry - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.214.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: opentelemetry ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-30T09:07:25Z

Semver Impact of This PR

🟡 Minor (new features)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

New Features ✨

Deps

Bump the opentelemetry group across 1 directory with 6 updates by dependabot[bot] in #20036

Bump babel-loader from 10.0.0 to 10.1.1 by dependabot in #19997
Bump handlebars from 4.7.7 to 4.7.9 by dependabot in #20008

Nuxt

Add middleware instrumentation compatibility for Nuxt 5 by s1gr1d in #19968
Support parametrized SSR routes in Nuxt 5 by s1gr1d in #19977

Other

(browser) Replace element timing spans with metrics by logaretm in #19869
(bun) Add bunRuntimeMetricsIntegration by chargome in #19979
(core) Support embedding APIs in google-genai by nicohrubec in #19797
(node) Add nodeRuntimeMetricsIntegration by chargome in #19923
(node-core) Add OTLP integration for node-core/light by andreiborza in #19729
(solid) Add route parametrization for Solid Router by andreiborza in #20031

Bug Fixes 🐛

(ci) Update validate-pr action to remove draft enforcement by stephanie-anderson in #20035
(e2e) Pin @opentelemetry/api to 1.9.0 in ts3.8 test app by logaretm in #19992
(node) Ensure startNewTrace propagates traceId in OTel environments by logaretm in #19963
(nuxt) Use virtual module for Nuxt pages data (SSR route parametrization) by s1gr1d in #20020
(opentelemetry) Convert seconds timestamps in span.end() to milliseconds by logaretm in #19958

Documentation 📚

(release) Update publishing-a-release.md by nicohrubec in #19982

Internal Changes 🔧

Core

Introduce instrumented method registry for AI integrations by nicohrubec in #19981
Consolidate getOperationName into one shared utility by nicohrubec in #19971

Deps

Bump amqplib from 0.10.7 to 0.10.9 by dependabot in #20000
Bump actions/upload-artifact from 6 to 7 by dependabot in #19569
Bump srvx from 0.11.12 to 0.11.13 by dependabot in #20001
Bump @apollo/server from 5.4.0 to 5.5.0 by dependabot in #20007

Deps Dev

Remove esbuild override in astro-5-cf-workers E2E test by isaacs in #20024
Bump node-forge from 1.3.2 to 1.4.0 by dependabot in #20012
Bump yaml from 2.8.2 to 2.8.3 by dependabot in #19985

Other

(deno) Expand Deno E2E test coverage by chargome in #19957
(e2e) Add e2e tests for nodeRuntimeMetricsIntegration by chargome in #19989

_{🤖 This preview updates automatically when you update the PR.}

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

cursor · 2026-03-30T09:10:49Z

packages/node-core/package.json

  },
  "peerDependencies": {
-    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/api": "^1.9.1",


Peer dependency range narrowing is a breaking change

Medium Severity

The @opentelemetry/api peerDependencies range was narrowed from ^1.9.0 to ^1.9.1 in published packages @sentry/node-core and @sentry/opentelemetry. This is a breaking change — users with @opentelemetry/api@1.9.0 installed previously satisfied the peer dependency but would now get warnings or errors. Dependabot blindly bumped peer dependency ranges alongside regular dependencies, but peer deps should retain the broader range unless there's a specific API requirement from the newer version. Flagging this because it was mentioned in the rules file as a breaking change concern.

Additional Locations (1)

packages/opentelemetry/package.json#L44-L45

^{Triggered by project rule: PR Review Guidelines for Cursor Bot}

This PR bumps all OpenTelemetry instrumentation packages and core dependencies: - @opentelemetry/api: ^1.9.0 -> ^1.9.1 - @opentelemetry/core: ^2.6.0 -> ^2.6.1 - @opentelemetry/context-async-hooks: ^2.6.0 -> ^2.6.1 - @opentelemetry/resources: ^2.6.0 -> ^2.6.1 - @opentelemetry/sdk-trace-base: ^2.6.0 -> ^2.6.1 - @opentelemetry/exporter-trace-otlp-http: ^0.213.0 -> ^0.214.0 - @opentelemetry/instrumentation: ^0.213.0 -> ^0.214.0 - @opentelemetry/instrumentation-http: 0.213.0 -> 0.214.0 - @opentelemetry/instrumentation-amqplib: 0.60.0 -> 0.61.0 - @opentelemetry/instrumentation-aws-sdk: 0.68.0 -> 0.69.0 - @opentelemetry/instrumentation-connect: 0.56.0 -> 0.57.0 - @opentelemetry/instrumentation-dataloader: 0.30.0 -> 0.31.0 - @opentelemetry/instrumentation-express: 0.62.0 -> 0.62.0 - @opentelemetry/instrumentation-fs: 0.32.0 -> 0.33.0 - @opentelemetry/instrumentation-generic-pool: 0.56.0 -> 0.57.0 - @opentelemetry/instrumentation-graphql: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-hapi: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-ioredis: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-kafkajs: 0.22.0 -> 0.23.0 - @opentelemetry/instrumentation-knex: 0.57.0 -> 0.58.0 - @opentelemetry/instrumentation-koa: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-lru-memoizer: 0.57.0 -> 0.58.0 - @opentelemetry/instrumentation-mongodb: 0.66.0 -> 0.67.0 - @opentelemetry/instrumentation-mongoose: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-mysql: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-mysql2: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-nestjs-core: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-pg: 0.65.0 -> 0.66.0 - @opentelemetry/instrumentation-redis: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-tedious: 0.32.0 -> 0.33.0 - @opentelemetry/instrumentation-undici: 0.23.0 -> 0.24.0 - @prisma/instrumentation: 7.4.2 -> 7.6.0 - @fastify/otel: 0.17.1 -> 0.18.0 Closes: #20036

andreiborza · 2026-03-31T02:54:05Z

Handled in #20046

dependabot · 2026-03-31T02:54:09Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

This PR bumps all OpenTelemetry instrumentation packages and core dependencies: - @opentelemetry/api: ^1.9.0 -> ^1.9.1 - @opentelemetry/core: ^2.6.0 -> ^2.6.1 - @opentelemetry/context-async-hooks: ^2.6.0 -> ^2.6.1 - @opentelemetry/resources: ^2.6.0 -> ^2.6.1 - @opentelemetry/sdk-trace-base: ^2.6.0 -> ^2.6.1 - @opentelemetry/exporter-trace-otlp-http: ^0.213.0 -> ^0.214.0 - @opentelemetry/instrumentation: ^0.213.0 -> ^0.214.0 - @opentelemetry/instrumentation-http: 0.213.0 -> 0.214.0 - @opentelemetry/instrumentation-amqplib: 0.60.0 -> 0.61.0 - @opentelemetry/instrumentation-aws-sdk: 0.68.0 -> 0.69.0 - @opentelemetry/instrumentation-connect: 0.56.0 -> 0.57.0 - @opentelemetry/instrumentation-dataloader: 0.30.0 -> 0.31.0 - @opentelemetry/instrumentation-express: 0.62.0 -> 0.62.0 - @opentelemetry/instrumentation-fs: 0.32.0 -> 0.33.0 - @opentelemetry/instrumentation-generic-pool: 0.56.0 -> 0.57.0 - @opentelemetry/instrumentation-graphql: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-hapi: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-ioredis: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-kafkajs: 0.22.0 -> 0.23.0 - @opentelemetry/instrumentation-knex: 0.57.0 -> 0.58.0 - @opentelemetry/instrumentation-koa: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-lru-memoizer: 0.57.0 -> 0.58.0 - @opentelemetry/instrumentation-mongodb: 0.66.0 -> 0.67.0 - @opentelemetry/instrumentation-mongoose: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-mysql: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-mysql2: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-nestjs-core: 0.59.0 -> 0.60.0 - @opentelemetry/instrumentation-pg: 0.65.0 -> 0.66.0 - @opentelemetry/instrumentation-redis: 0.61.0 -> 0.62.0 - @opentelemetry/instrumentation-tedious: 0.32.0 -> 0.33.0 - @opentelemetry/instrumentation-undici: 0.23.0 -> 0.24.0 - @prisma/instrumentation: 7.4.2 -> 7.6.0 - @fastify/otel: 0.17.1 -> 0.18.0 Closes: #20036

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026

cursor bot reviewed Mar 30, 2026

View reviewed changes

chargome requested a review from andreiborza March 30, 2026 10:36

andreiborza mentioned this pull request Mar 31, 2026

feat(deps): Bump OpenTelemetry dependencies #20046

Merged

andreiborza closed this Mar 31, 2026

dependabot bot deleted the dependabot/npm_and_yarn/opentelemetry-524f92e10b branch March 31, 2026 02:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(deps): Bump the opentelemetry group across 1 directory with 6 updates#20036

feat(deps): Bump the opentelemetry group across 1 directory with 6 updates#20036
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/opentelemetry-524f92e10b

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

github-actions bot commented Mar 30, 2026 •

edited

Loading

New Features ✨

Deps

Nuxt

Other

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

Core

Deps

Deps Dev

Other

Uh oh!

cursor bot left a comment

Uh oh!

cursor bot Mar 30, 2026

Uh oh!

andreiborza commented Mar 31, 2026

Uh oh!

dependabot bot commented on behalf of github Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

api/v1.9.1

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

experimental/v0.214.0

0.214.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

Uh oh!

github-actions bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Semver Impact of This PR

New Features ✨

Deps

Nuxt

Other

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

Core

Deps

Deps Dev

Other

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Mar 30, 2026

Choose a reason for hiding this comment

Peer dependency range narrowing is a breaking change

Uh oh!

andreiborza commented Mar 31, 2026

Uh oh!

dependabot bot commented on behalf of github Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions bot commented Mar 30, 2026 •

edited

Loading