Bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-proto and @opentelemetry/sdk-node by dependabot[bot] · Pull Request #259 · Alessandrogilardini4/docs

dependabot · 2026-04-17T21:15:14Z

Bumps protobufjs to 8.0.1 and updates ancestor dependencies protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-proto and @opentelemetry/sdk-node. These dependencies need to be updated together.

Updates protobufjs from 7.5.4 to 8.0.1

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.0.1

8.0.1 (2026-03-11)

Bug Fixes

bump protobufjs dependency version for cli package (#2128) (549b05e)

correct json syntax in tsconfig.json (#2120) (8065625)

descriptor: guard oneof index for non-Type parents (#2122) (1cac5cf)

do not allow setting proto in Message constructor (#2126) (f05e3c3)

filter invalid characters from the type name (#2127) (535df44)

protobufjs: v8.0.0

8.0.0 (2025-12-16)

⚠ BREAKING CHANGES

add Edition 2024 Support (#2060)

Features

add Edition 2024 Support (#2060) (53e8492)

v7.5.5

This release backports two reported security issues to 7.x branch.

fix: do not allow setting __proto__ in Message constructor (#2126)

fix: filter invalid characters from the type name (#2127)

Full Changelog: protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.5.5

Changelog

Sourced from protobufjs's changelog.

8.0.1 (2026-03-11)

Bug Fixes

bump protobufjs dependency version for cli package (#2128) (549b05e)

correct json syntax in tsconfig.json (#2120) (8065625)

descriptor: guard oneof index for non-Type parents (#2122) (1cac5cf)

do not allow setting proto in Message constructor (#2126) (f05e3c3)

filter invalid characters from the type name (#2127) (535df44)

8.0.0 (2025-12-16)

⚠ BREAKING CHANGES

add Edition 2024 Support (#2060)

Features

add Edition 2024 Support (#2060) (53e8492)

Commits

6559b3d chore: release master (#2129)
042f81d chore(deps): update dependency tmp to v0.2.4 [security] (#2091)
8065625 fix: correct json syntax in tsconfig.json (#2120)
1cac5cf fix(descriptor): guard oneof index for non-Type parents (#2122)
549b05e fix: bump protobufjs dependency version for cli package (#2128)
535df44 fix: filter invalid characters from the type name (#2127)
f05e3c3 fix: do not allow setting proto in Message constructor (#2126)
933e875 chore: release master (#2116)
53e8492 feat!: add Edition 2024 Support (#2060)
See full diff in compare view

Maintainer changes

This version was pushed to npm by fenster, a new releaser for protobufjs since your current version.

Updates @opentelemetry/auto-instrumentations-node from 0.69.0 to 0.73.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.73.0

0.73.0 (2026-04-17)

Features

deps: update deps matching '@opentelemetry/*' (#3479) (8891261)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-bunyan bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-connect bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-cucumber bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-dataloader bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-dns bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-express bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-fs bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-graphql bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-hapi bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-ioredis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.23.0 to ^0.24.0

@opentelemetry/instrumentation-knex bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-koa bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-memcached bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-mongodb bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mongoose bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-net bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-openai bumped from ^0.12.0 to ^0.13.0

@opentelemetry/instrumentation-oracledb bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-pg bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-pino bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-redis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-restify bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-router bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-socket.io bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-tedious bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-undici bumped from ^0.24.0 to ^0.25.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.73.0 (2026-04-17)

Features

deps: update deps matching '@opentelemetry/*' (#3479) (8891261)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-bunyan bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-connect bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-cucumber bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-dataloader bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-dns bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-express bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-fs bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-graphql bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-hapi bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-ioredis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.23.0 to ^0.24.0

@opentelemetry/instrumentation-knex bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-koa bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-memcached bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-mongodb bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mongoose bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-net bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-openai bumped from ^0.12.0 to ^0.13.0

@opentelemetry/instrumentation-oracledb bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-pg bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-pino bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-redis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-restify bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-router bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-socket.io bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-tedious bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-undici bumped from ^0.24.0 to ^0.25.0

@opentelemetry/instrumentation-winston bumped from ^0.58.0 to ^0.59.0

... (truncated)

Commits

bd017c8 chore: release main (#3451)
8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
36a030c chore: switch to short license header (#3476)
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-proto from 0.212.0 to 0.215.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-proto's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @pichlermarc

(user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.

feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @david-luna

🚀 Features

feat(otlp-transformer): add custom protobuf logs serializer #6228 @pichlermarc

feat(otlp-transformer): add custom protobuf logs export response deserializer #6530 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @akandic47

fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @kartikgola

fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @david-luna

fix(web-common): add check for possible unsafe json parse #6589 @maryliag

fix(otlp-transformer): add check for possible unsafe json parse #6588 @maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @maryliag

refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

feat(configuration): add sampler configuration parsing support #6409 @MikeGoldsmith

feat(configuration): add resource detection parsing #6435 @MikeGoldsmith

feat(configuration): export interfaces required in other packages #6462 @maryliag

feat(configuration): set MeterProvider on sdk start #6463 @maryliag

feat(configuration): export interfaces required in other packages #6507 @maryliag

🐛 Bug Fixes

fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @overbalance

fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @overbalance

fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @dyladan

fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @gotgenes

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

... (truncated)

Commits

a0476ee chore: prepare next release (#6603)
6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
840f3d4 chore: re-arrange misplaced changelog entries (#6604)
2da8d39 feat(configuration): refactoring config loader to print warning message for b...
401af13 fix(deps): update dependency protobufjs to v8 (#6602)
36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
394eeb0 chore: update changelog script (#6586)
36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.212.0 to 0.215.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @pichlermarc

(user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.

feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @david-luna

🚀 Features

feat(otlp-transformer): add custom protobuf logs serializer #6228 @pichlermarc

feat(otlp-transformer): add custom protobuf logs export response deserializer #6530 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @akandic47

fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @kartikgola

fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @david-luna

fix(web-common): add check for possible unsafe json parse #6589 @maryliag

fix(otlp-transformer): add check for possible unsafe json parse #6588 @maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @maryliag

refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

feat(configuration): add sampler configuration parsing support #6409 @MikeGoldsmith

feat(configuration): add resource detection parsing #6435 @MikeGoldsmith

feat(configuration): export interfaces required in other packages #6462 @maryliag

feat(configuration): set MeterProvider on sdk start #6463 @maryliag

feat(configuration): export interfaces required in other packages #6507 @maryliag

🐛 Bug Fixes

fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @overbalance

fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @overbalance

fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @dyladan

fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @gotgenes

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

... (truncated)

Commits

a0476ee chore: prepare next release (#6603)
6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
840f3d4 chore: re-arrange misplaced changelog entries (#6604)
2da8d39 feat(configuration): refactoring config loader to print warning message for b...
401af13 fix(deps): update dependency protobufjs to v8 (#6602)
36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
394eeb0 chore: update changelog script (#6586)
36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…metry/exporter-trace-otlp-proto and @opentelemetry/sdk-node Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 8.0.1 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) and [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js). These dependencies need to be updated together. Updates `protobufjs` from 7.5.4 to 8.0.1 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v8.0.1) Updates `@opentelemetry/auto-instrumentations-node` from 0.69.0 to 0.73.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.73.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-proto` from 0.212.0 to 0.215.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0) Updates `@opentelemetry/sdk-node` from 0.212.0 to 0.215.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 8.0.1 dependency-type: indirect - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.73.0 dependency-type: direct:production - dependency-name: "@opentelemetry/exporter-trace-otlp-proto" dependency-version: 0.215.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.215.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-12T15:05:56Z

Superseded by #267.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 17, 2026

dependabot Bot closed this May 12, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/multi-c0ae3873ca branch May 12, 2026 15:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-proto and @opentelemetry/sdk-node#259

Bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-proto and @opentelemetry/sdk-node#259
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c0ae3873ca

dependabot Bot commented on behalf of github Apr 17, 2026

Uh oh!

dependabot Bot commented on behalf of github May 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 17, 2026

protobufjs: v8.0.1

8.0.1 (2026-03-11)

Bug Fixes

protobufjs: v8.0.0

8.0.0 (2025-12-16)

⚠ BREAKING CHANGES

Features

v7.5.5

8.0.1 (2026-03-11)

Bug Fixes

8.0.0 (2025-12-16)

⚠ BREAKING CHANGES

Features

auto-instrumentations-node: v0.73.0

0.73.0 (2026-04-17)

Features

Dependencies

0.73.0 (2026-04-17)

Features

Dependencies

experimental/v0.215.0

0.215.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.214.0

0.214.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.215.0

0.215.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.214.0

0.214.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

Uh oh!

dependabot Bot commented on behalf of github May 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants