Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 21 updates#34

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-ce6b41d120
Open

chore(deps): bump the minor-and-patch group across 1 directory with 21 updates#34
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-ce6b41d120

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the minor-and-patch group with 19 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.26.0 1.27.1
@opentelemetry/api-logs 0.211.0 0.212.0
@opentelemetry/auto-instrumentations-node 0.69.0 0.70.1
@opentelemetry/exporter-logs-otlp-http 0.211.0 0.212.0
@opentelemetry/exporter-metrics-otlp-http 0.211.0 0.212.0
@opentelemetry/exporter-trace-otlp-http 0.211.0 0.212.0
@opentelemetry/instrumentation 0.211.0 0.212.0
@opentelemetry/instrumentation-express 0.59.0 0.60.0
@opentelemetry/instrumentation-http 0.211.0 0.212.0
@opentelemetry/instrumentation-winston 0.55.0 0.56.0
@opentelemetry/resources 2.5.0 2.5.1
@opentelemetry/sdk-logs 0.211.0 0.212.0
@opentelemetry/sdk-metrics 2.5.0 2.5.1
@opentelemetry/sdk-node 0.211.0 0.212.0
@opentelemetry/semantic-conventions 1.39.0 1.40.0
@ai-sdk/azure 3.0.27 3.0.38
@types/node 25.2.3 25.3.3
ai 6.0.79 6.0.105
dotenv 17.2.4 17.3.1

Updates @modelcontextprotocol/sdk from 1.26.0 to 1.27.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.26.0...v1.27.0

Commits
  • 4faa8c8 chore: bump version to 1.27.1 (#1581)
  • 09a85a8 fix: call onerror for silently swallowed transport errors (#1580)
  • e79d14a fix: prevent command injection in example URL opening (v1.x backport) (#1579)
  • 342ea39 docs: comprehensive feature documentation for SEP-1730 Tier 1 (#1548)
  • 2084a22 docs: add governance documentation for SEP-1730 (#1547)
  • f2d2145 feat: implement auth/pre-registration conformance scenario (#1545)
  • 8cbc658 chore: bump version for v1.27.0 (#1541)
  • 5c16ae3 [v1.x] feat(tasks): add streaming methods for elicitation and sampling (#1528)
  • 97ab379 feat: add url property to RequestInfo interface (#1353)
  • 825e9ab feat: backport discoverOAuthServerInfo() and discovery caching to v1.x (#1533)
  • Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.69.0 to 0.70.1

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.70.1

0.70.1 (2026-02-25)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.27.0 to ^0.28.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.58.0 to ^0.59.0

auto-instrumentations-node: v0.70.0

0.70.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

  • auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.70.1 (2026-02-25)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.27.0 to ^0.28.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.58.0 to ^0.59.0

0.70.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

  • auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.64.0 to ^0.65.0

... (truncated)

Commits

Updates @opentelemetry/exporter-logs-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-logs-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-metrics-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/instrumentation's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-express from 0.59.0 to 0.60.0

Release notes

Sourced from @​opentelemetry/instrumentation-express's releases.

instrumentation-graphql: v0.60.0

0.60.0 (2026-02-25)

Features

  • instrumentation-graphql: add parent name in attributes of resolver span (#3287) (ea2a90a)
Changelog

Sourced from @​opentelemetry/instrumentation-express's changelog.

0.60.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.58.0 to ^0.59.0
Commits
  • 2300dc1 chore: improve test workflow and coverage reports (#2866)
  • ca26f63 chore: lint .js and .mjs files (in addition to the existing .ts file linting)...
  • 2120399 chore(deps): update dependency @​types/express to v5 (#2925)
  • 9d90781 chore: add test-services scripts per package (#2932)
  • e7960a2 chore: release main (#2931)
  • e4ab2a9 feat(deps): update deps matching '@opentelemetry/*' (#2930)
  • 17f4334 chore: rename workspace dirs to packages/${package-base-name} (#2928)
  • See full diff in compare view

Updates @opentelemetry/instrumentation-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/instrumentation-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (

…1 updates

Bumps the minor-and-patch group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.27.1` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.69.0` | `0.70.1` |
| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.59.0` | `0.60.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation-winston](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-winston) | `0.55.0` | `0.56.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.5.1` |
| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.5.1` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.40.0` |
| [@ai-sdk/azure](https://github.com/vercel/ai) | `3.0.27` | `3.0.38` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.3` | `25.3.3` |
| [ai](https://github.com/vercel/ai) | `6.0.79` | `6.0.105` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.4` | `17.3.1` |



Updates `@modelcontextprotocol/sdk` from 1.26.0 to 1.27.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.26.0...v1.27.1)

Updates `@opentelemetry/api-logs` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/auto-instrumentations-node` from 0.69.0 to 0.70.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.70.1/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-logs-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation-express` from 0.59.0 to 0.60.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.60.0/packages/instrumentation-express)

Updates `@opentelemetry/instrumentation-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation-winston` from 0.55.0 to 0.56.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-winston/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.56.0/packages/instrumentation-winston)

Updates `@opentelemetry/resources` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-logs` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/sdk-metrics` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-node` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/sdk-trace-base` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-trace-node` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.40.0)

Updates `@ai-sdk/azure` from 3.0.27 to 3.0.38
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/azure@3.0.27...@ai-sdk/azure@3.0.38)

Updates `@types/node` from 25.2.3 to 25.3.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ai` from 6.0.79 to 6.0.105
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@6.0.79...ai@6.0.105)

Updates `dotenv` from 17.2.4 to 17.3.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.4...v17.3.1)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.70.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-logs-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-express"
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-winston"
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-logs"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/azure"
  dependency-version: 3.0.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 6.0.105
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026
@dependabot dependabot bot requested a review from maxgolov as a code owner March 2, 2026 03:30
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026
@github-actions
Copy link

github-actions bot commented Mar 2, 2026

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
  • ⚠️ 3 packages with OpenSSF Scorecard issues.

View full job summary

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants