Skip to content

deps(backend): bump the minor-and-patch group across 1 directory with 24 updates#26

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-0d0a4f9d60
Closed

deps(backend): bump the minor-and-patch group across 1 directory with 24 updates#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-0d0a4f9d60

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Bumps the minor-and-patch group with 23 updates in the /backend directory:

Package From To
@aws-sdk/client-s3 3.957.0 3.1004.0
@aws-sdk/s3-request-presigner 3.957.0 3.1004.0
@opentelemetry/api 1.7.0 1.9.0
@opentelemetry/auto-instrumentations-node 0.40.3 0.71.0
@opentelemetry/exporter-trace-otlp-http 0.48.0 0.213.0
@opentelemetry/sdk-node 0.48.0 0.213.0
@opentelemetry/semantic-conventions 1.38.0 1.40.0
bullmq 5.66.2 5.70.4
multer 2.0.2 2.1.1
@types/multer 1.4.13 2.1.0
sanitize-html 2.17.0 2.17.1
@types/sanitize-html 2.16.0 2.16.1
stripe 20.1.0 20.4.1
@types/k6 1.4.0 1.6.0
@types/pdfkit 0.17.4 0.17.5
@typescript-eslint/eslint-plugin 8.50.1 8.56.1
@typescript-eslint/parser 8.50.1 8.56.1
@vitest/coverage-v8 4.0.16 4.0.18
eslint-plugin-prettier 5.5.4 5.5.5
prettier 3.7.4 3.8.1
supertest 7.1.4 7.2.2
@types/supertest 2.0.16 7.2.0
vitest 4.0.16 4.0.18

Updates @aws-sdk/client-s3 from 3.957.0 to 3.1004.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1004.0

3.1004.0(2026-03-06)

Chores
  • codegen: smithy-aws-typescript-codegen 0.46.0 (#7825) (9652a4b1)
New Features
  • clients: update client endpoints as of 2026-03-06 (8c6015c0)
  • client-gameliftstreams: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. (3ce882b6)
  • client-bedrock: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. (63b35986)
  • client-connect: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. (696614ae)
  • client-bcm-data-exports: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. (23fdf994)
  • client-deadline: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. (16f6d510)
  • client-appintegrations: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. (c86ed4e1)
  • client-bedrock-agentcore-control: Adds support for streaming memory records in AgentCore Memory (17468570)
  • client-sesv2: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. (3a573039)
Bug Fixes
  • build: fix package release ordering (#7829) (cc6da58f)
  • middleware-user-agent: use retry strategy mode property instead of legacy fallback (#7811) (db786337)

For list of updated packages, view updated-packages.md in assets-3.1004.0.zip

v3.1003.0

3.1003.0(2026-03-05)

Chores
  • bump '@smithy/*' dependencies (#7822) (8ddd5442)
  • set downlevel types to be used in typescript@'<4.5' (#7817) (03dad66b)
  • clients:
    • strip trailing periods when the last character is non-alphanumeric (#7821) (6b5b50b2)
    • sort missed package.json files (#7820) (297b5643)
    • include deprecated-since in generated tsdoc (#7815) (17ecb20a)
New Features
  • clients: update client endpoints as of 2026-03-05 (e9a8d8de)
  • client-guardduty: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence (bb9d4662)
  • client-savingsplans: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. (9e063913)
  • client-sagemaker: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. (b6216564)
  • client-connecthealth: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. (454c6cb7)
  • client-mpa: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. (e9581543)
  • client-ec2: Added metadata field to CapacityAllocation. (d7cce1c2)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1004.0 (2026-03-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1003.0 (2026-03-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1002.0 (2026-03-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1001.0 (2026-03-03)

Note: Version bump only for package @​aws-sdk/client-s3

3.1000.0 (2026-02-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.999.0 (2026-02-26)

Note: Version bump only for package @​aws-sdk/client-s3

3.998.0 (2026-02-25)

... (truncated)

Commits
  • 7c08152 Publish v3.1004.0
  • 4c36ea3 Publish v3.1003.0
  • 8ddd544 chore: bump '@smithy/*' dependencies (#7822)
  • 6b5b50b chore(clients): strip trailing periods when the last character is non-alphanu...
  • 03dad66 chore: set downlevel types to be used in typescript@'<4.5' (#7817)
  • 1eabedb test(clients): ignore prettifying automated snapshot test code (#7819)
  • 17ecb20 chore(clients): include deprecated-since in generated tsdoc (#7815)
  • 37f1adc test(clients): run client feature tests in browser mode too (#7808)
  • 800431b Publish v3.1002.0
  • b8467bd Publish v3.1001.0
  • Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.957.0 to 3.1004.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1004.0

3.1004.0(2026-03-06)

Chores
  • codegen: smithy-aws-typescript-codegen 0.46.0 (#7825) (9652a4b1)
New Features
  • clients: update client endpoints as of 2026-03-06 (8c6015c0)
  • client-gameliftstreams: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. (3ce882b6)
  • client-bedrock: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. (63b35986)
  • client-connect: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. (696614ae)
  • client-bcm-data-exports: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. (23fdf994)
  • client-deadline: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. (16f6d510)
  • client-appintegrations: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. (c86ed4e1)
  • client-bedrock-agentcore-control: Adds support for streaming memory records in AgentCore Memory (17468570)
  • client-sesv2: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. (3a573039)
Bug Fixes
  • build: fix package release ordering (#7829) (cc6da58f)
  • middleware-user-agent: use retry strategy mode property instead of legacy fallback (#7811) (db786337)

For list of updated packages, view updated-packages.md in assets-3.1004.0.zip

v3.1003.0

3.1003.0(2026-03-05)

Chores
  • bump '@smithy/*' dependencies (#7822) (8ddd5442)
  • set downlevel types to be used in typescript@'<4.5' (#7817) (03dad66b)
  • clients:
    • strip trailing periods when the last character is non-alphanumeric (#7821) (6b5b50b2)
    • sort missed package.json files (#7820) (297b5643)
    • include deprecated-since in generated tsdoc (#7815) (17ecb20a)
New Features
  • clients: update client endpoints as of 2026-03-05 (e9a8d8de)
  • client-guardduty: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence (bb9d4662)
  • client-savingsplans: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. (9e063913)
  • client-sagemaker: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. (b6216564)
  • client-connecthealth: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. (454c6cb7)
  • client-mpa: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. (e9581543)
  • client-ec2: Added metadata field to CapacityAllocation. (d7cce1c2)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1004.0 (2026-03-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1003.0 (2026-03-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1002.0 (2026-03-04)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1001.0 (2026-03-03)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1000.0 (2026-02-27)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.999.0 (2026-02-26)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.998.0 (2026-02-25)

... (truncated)

Commits

Updates @opentelemetry/api from 1.7.0 to 1.9.0

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.0

1.9.0

🚀 (Enhancement)

  • feat(metrics): added synchronous gauge #4528 @​clintonb
  • feat(api): allow adding span links after span creation #4536 @​seemk
    • This change is non-breaking for end-users, but breaking for Trace SDK implmentations in accordance with the specification as new features need to be implemented.
  • feat: support node 22 #4666 @​dyladan

API v1.8.0

🚀 (Enhancement)

  • feat(api): add SugaredTracer for functions not defined in the spec #3317 @​secustor

🐛 (Bug Fix)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.0

🚀 (Enhancement)

  • feat(instrumentation-grpc): set net.peer.name and net.peer.port on client spans #3430
  • feat(exporter-trace-otlp-proto): Add protobuf otlp trace exporter support for browser #3208 @​pkanal

🐛 (Bug Fix)

  • fix(sdk-metrics): use default Resource to comply with semantic conventions #3411 @​pichlermarc
    • Metrics exported by the SDK now contain the following resource attributes by default:
      • service.name
      • telemetry.sdk.name
      • telemetry.sdk.language
      • telemetry.sdk.version
  • fix(sdk-metrics): use Date.now() for instrument recording timestamps #3514 @​MisterSquishy
  • fix(sdk-trace): make spans resilient to clock drift #3434 @​dyladan
  • fix(selenium-tests): updated webpack version for selenium test issue #3456 @​SaumyaBhushan
  • fix(sdk-metrics): collect metrics when periodic exporting metric reader flushes #3517 @​legendecas
  • fix(sdk-metrics): fix duplicated registration of metrics for collectors #3488 @​legendecas
  • fix(core): fix precision loss in numberToHrtime #3480 @​legendecas

🏠 (Internal)

1.8.0

  • @opentelemetry/sdk-metrics has been promoted to stable
  • @opentelemetry/api-metrics has been merged into @opentelemetry/api and deprecated

💥 Breaking Change

🚀 (Enhancement)

🐛 (Bug Fix)

  • fix(sdk-trace): enforce consistent span durations #3327 @​dyladan
  • fix(resources): fix EnvDetector throwing errors when attribute values contain spaces #3295
  • fix(trace): fix an issue which caused negative span durations in web based spans #3359 @​dyladan
  • fix(resources): strict OTEL_RESOURCE_ATTRIBUTES baggage octet decoding

... (truncated)

Commits
  • 08f597f chore: release API 1.4.0 / SDK 1.9.0 / 0.35.0 (#3516)
  • 969bb62 fix(tracing): make spans resilient to performance clock drift (#3434)
  • 2dcc898 Document repo settings (#3519)
  • 475e401 docs(sdk-metrics): fix badge and reword introductory sentence (#3484)
  • 126ae93 fix(sdk-node): fix exporter to be read only OTEL_TRACES_EXPORTER is set to a ...
  • c93ab9e fix(core): fix precision loss in numberToHrtime (#3480)
  • 3fd6fb8 fix(sdk-metrics): fix duplicated registration of metrics for collectors (#3488)
  • 93222fc fix(api): declare this parameter type in observable callbacks (#3497)
  • eecb800 feat(sdk-node): configure no-op sdk with OTEL_SDK_DISABLED environment vari...
  • 1c3af6c feat(api-logs): add the SeverityNumber enumeration (#3443)
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.40.3 to 0.71.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.71.0

0.71.0 (2026-03-04)

Features

  • deps: update deps matching "@opentelemetry/*" (#3411) (7f4b776)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-express bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.21.0 to ^0.22.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-net bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.10.0 to ^0.11.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-router bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.25.0 to ^0.26.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.31.0 to ^0.32.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.71.0 (2026-03-04)

Features

  • deps: update deps matching "@opentelemetry/*" (#3411) (7f4b776)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-express bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.21.0 to ^0.22.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-net bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.10.0 to ^0.11.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-router bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.25.0 to ^0.26.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.22.0 to ^0.23.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​opentelemetry/auto-instrumentations-node since your current version.


Updates @opentelemetry/exporter-trace-otlp-http from 0.48.0 to 0.213.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

  • fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @​trentm

🚀 Features

  • feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @​vitorvasc

🐛 Bug Fixes

  • fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @​trentm
  • fix(otlp-exporter-base): handle response error #6412 @​pichlermarc
    • Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.
  • fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @​overbalance
    • (user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version
  • fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @​vitorvasc
  • fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @​overbalance @​imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

... (truncated)

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
  • 65c9d9f docs: fix changelog PR number typo (#6453)
  • 3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
  • dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​opentelemetry/exporter-trace-otlp-http since your current version.


Updates @opentelemetry/sdk-node from 0.48.0 to 0.213.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

  • fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @​trentm

🚀 Features

  • feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @​vitorvasc

🐛 Bug Fixes

  • fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @​trentm
  • fix(otlp-exporter-base): handle response error #6412 @​pichlermarc
    • Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.
  • fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @​overbalance
    • (user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version
  • fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @​vitorvasc
  • fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @​overbalance @​imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

... (truncated)

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)

… 24 updates

Bumps the minor-and-patch group with 23 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.957.0` | `3.1004.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.957.0` | `3.1004.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.7.0` | `1.9.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.40.3` | `0.71.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.213.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.213.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.40.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.66.2` | `5.70.4` |
| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.1.1` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `1.4.13` | `2.1.0` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.17.1` |
| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.0` | `2.16.1` |
| [stripe](https://github.com/stripe/stripe-node) | `20.1.0` | `20.4.1` |
| [@types/k6](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/k6) | `1.4.0` | `1.6.0` |
| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.4` | `0.17.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.50.1` | `8.56.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.50.1` | `8.56.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.16` | `4.0.18` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.1` |
| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |
| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `2.0.16` | `7.2.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.16` | `4.0.18` |



Updates `@aws-sdk/client-s3` from 3.957.0 to 3.1004.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1004.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.957.0 to 3.1004.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1004.0/packages/s3-request-presigner)

Updates `@opentelemetry/api` from 1.7.0 to 1.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.7.0...v1.9.0)

Updates `@opentelemetry/auto-instrumentations-node` from 0.40.3 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.71.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.48.0 to 0.213.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.213.0)

Updates `@opentelemetry/sdk-node` from 0.48.0 to 0.213.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.213.0)

Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.40.0)

Updates `bullmq` from 5.66.2 to 5.70.4
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.66.2...v5.70.4)

Updates `ioredis` from 5.8.2 to 5.9.3
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.8.2...v5.9.3)

Updates `multer` from 2.0.2 to 2.1.1
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.0.2...v2.1.1)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `sanitize-html` from 2.17.0 to 2.17.1
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/2.17.1/packages/sanitize-html)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `stripe` from 20.1.0 to 20.4.1
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v20.1.0...v20.4.1)

Updates `@types/k6` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/k6)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `@types/pdfkit` from 0.17.4 to 0.17.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pdfkit)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `@typescript-eslint/eslint-plugin` from 8.50.1 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.1 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser)

Updates `@vitest/coverage-v8` from 4.0.16 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5)

Updates `prettier` from 3.7.4 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.1)

Updates `supertest` from 7.1.4 to 7.2.2
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.1.4...v7.2.2)

Updates `@types/supertest` from 2.0.16 to 7.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest)

Updates `vitest` from 4.0.16 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1004.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1004.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.213.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.213.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bullmq
  dependency-version: 5.70.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ioredis
  dependency-version: 5.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: multer
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: stripe
  dependency-version: 20.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/k6"
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: "@types/pdfkit"
  dependency-version: 0.17.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: supertest
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/supertest"
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Mar 9, 2026

Labels

The following labels could not be found: backend, dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Mar 16, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 16, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/backend/minor-and-patch-0d0a4f9d60 branch March 16, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants