deps(backend): bump the minor-and-patch group across 1 directory with 25 updates by dependabot[bot] · Pull Request #37 · danbe123/spannerwork

dependabot · 2026-05-25T11:55:31Z

Bumps the minor-and-patch group with 24 updates in the /backend directory:

Package	From	To
@aws-sdk/client-s3	`3.957.0`	`3.1053.0`
@aws-sdk/s3-request-presigner	`3.957.0`	`3.1053.0`
@opentelemetry/api	`1.7.0`	`1.9.1`
@opentelemetry/auto-instrumentations-node	`0.40.3`	`0.76.0`
@opentelemetry/exporter-trace-otlp-http	`0.48.0`	`0.218.0`
@opentelemetry/sdk-node	`0.48.0`	`0.218.0`
@opentelemetry/semantic-conventions	`1.38.0`	`1.41.1`
bullmq	`5.66.2`	`5.77.3`
multer	`2.0.2`	`2.1.1`
@types/multer	`1.4.13`	`2.1.0`
pdfkit	`0.17.2`	`0.18.0`
sanitize-html	`2.17.0`	`2.17.4`
@types/sanitize-html	`2.16.0`	`2.16.1`
swagger-jsdoc	`6.2.8`	`6.3.0`
@types/pdfkit	`0.17.4`	`0.17.6`
@typescript-eslint/eslint-plugin	`8.50.1`	`8.59.4`
@typescript-eslint/parser	`8.50.1`	`8.59.4`
@vitest/coverage-v8	`4.0.16`	`4.1.7`
eslint-plugin-prettier	`5.5.4`	`5.5.5`
prettier	`3.7.4`	`3.8.3`
supertest	`7.1.4`	`7.2.2`
@types/supertest	`2.0.16`	`7.2.0`
tsx	`4.21.0`	`4.22.3`
vitest	`4.0.16`	`4.1.7`

Updates @aws-sdk/client-s3 from 3.957.0 to 3.1053.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1053.0

3.1053.0(2026-05-22)

Documentation Changes

client-gameliftstreams: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. (bf88fa50)

New Features

clients: update client endpoints as of 2026-05-22 (3518814a)

client-appconfig: Adding new BDD representation of endpoint ruleset (e757a915)

client-repostspace: Adding new BDD representation of endpoint ruleset (15fec74b)

client-ivs-realtime: Adding new BDD representation of endpoint ruleset (adeea78b)

client-cloudcontrol: Adding new BDD representation of endpoint ruleset (2e7ef3bf)

client-tnb: Adding new BDD representation of endpoint ruleset (f07457cb)

client-sso-oidc: Adding new BDD representation of endpoint ruleset (2e909d25)

client-s3vectors: Adding new BDD representation of endpoint ruleset (4071f1a4)

client-internetmonitor: Adding new BDD representation of endpoint ruleset (117e04a9)

client-freetier: Adding new BDD representation of endpoint ruleset (e3cf14a2)

client-oam: Adding new BDD representation of endpoint ruleset (5a30b722)

client-forecastquery: Adding new BDD representation of endpoint ruleset (ada5ae32)

client-customer-profiles: Adding new BDD representation of endpoint ruleset (9de89c10)

client-migration-hub-refactor-spaces: Adding new BDD representation of endpoint ruleset (a4e5e7ba)

client-controltower: Adding new BDD representation of endpoint ruleset (b99b7a18)

client-databrew: Adding new BDD representation of endpoint ruleset (4a1bcdb9)

client-b2bi: Adding new BDD representation of endpoint ruleset (66bb63d1)

client-simspaceweaver: Adding new BDD representation of endpoint ruleset (c6617b6d)

client-emr-containers: Adding new BDD representation of endpoint ruleset (e99cccbd)

client-bcm-recommended-actions: Adding new BDD representation of endpoint ruleset (45477f08)

client-forecast: Adding new BDD representation of endpoint ruleset (5964d82b)

client-neptunedata: Adding new BDD representation of endpoint ruleset (418745d5)

client-qconnect: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call (0213a862)

client-bcm-pricing-calculator: Adding new BDD representation of endpoint ruleset (69e44c0d)

client-panorama: Adding new BDD representation of endpoint ruleset (d227732b)

client-license-manager-user-subscriptions: Adding new BDD representation of endpoint ruleset (7fd5d202)

client-partnercentral-account: Adding new BDD representation of endpoint ruleset (ad88edbb)

client-schemas: Adding new BDD representation of endpoint ruleset (d8835cfc)

client-pi: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. (b09c19bf)

client-outposts: Adding new BDD representation of endpoint ruleset (6e7917a6)

client-frauddetector: Adding new BDD representation of endpoint ruleset (9c130d58)

client-network-firewall: Adding new BDD representation of endpoint ruleset (963a1286)

client-geo-places: Adding new BDD representation of endpoint ruleset (965ac97a)

client-sesv2: Adding new BDD representation of endpoint ruleset (6f1bd2e8)

client-bedrock-agent-runtime: Adding new BDD representation of endpoint ruleset (7ac37e3a)

client-rbin: Adding new BDD representation of endpoint ruleset (5e73fd45)

client-codestar-notifications: Adding new BDD representation of endpoint ruleset (d95ca14c)

client-application-signals: Adding new BDD representation of endpoint ruleset (38a20bfa)

client-ec2: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. (bc91aa62)

client-marketplace-discovery: Adding new BDD representation of endpoint ruleset (45132960)

client-notificationscontacts: Adding new BDD representation of endpoint ruleset (e9ca97ab)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1053.0 (2026-05-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1052.0 (2026-05-21)

Note: Version bump only for package @aws-sdk/client-s3

3.1051.0 (2026-05-20)

Note: Version bump only for package @aws-sdk/client-s3

3.1050.0 (2026-05-19)

Note: Version bump only for package @aws-sdk/client-s3

3.1049.0 (2026-05-18)

Bug Fixes

client-sts: update imports to new module locations (#8025) (be183b6)

3.1048.0 (2026-05-15)

Note: Version bump only for package @aws-sdk/client-s3

... (truncated)

Commits

ef69ea6 Publish v3.1053.0
443d6be Publish v3.1052.0
0d6242d chore(codegen): update @smithy dependencies (#8038)
b825c13 Publish v3.1051.0
bdc9fc6 Publish v3.1050.0
04d52f3 Publish v3.1049.0
be183b6 fix(client-sts): update imports to new module locations (#8025)
313813d Publish v3.1048.0
1af9047 chore(codegen): updated import sources for aws-sdk core (#8015)
eabae7d chore(codegen): sync for browser bundle fixes (#8022)
Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.957.0 to 3.1053.0

Release notes

Sourced from @aws-sdk/s3-request-presigner's releases.

v3.1053.0

3.1053.0(2026-05-22)

Documentation Changes

client-gameliftstreams: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. (bf88fa50)

New Features

clients: update client endpoints as of 2026-05-22 (3518814a)

client-appconfig: Adding new BDD representation of endpoint ruleset (e757a915)

client-repostspace: Adding new BDD representation of endpoint ruleset (15fec74b)

client-ivs-realtime: Adding new BDD representation of endpoint ruleset (adeea78b)

client-cloudcontrol: Adding new BDD representation of endpoint ruleset (2e7ef3bf)

client-tnb: Adding new BDD representation of endpoint ruleset (f07457cb)

client-sso-oidc: Adding new BDD representation of endpoint ruleset (2e909d25)

client-s3vectors: Adding new BDD representation of endpoint ruleset (4071f1a4)

client-internetmonitor: Adding new BDD representation of endpoint ruleset (117e04a9)

client-freetier: Adding new BDD representation of endpoint ruleset (e3cf14a2)

client-oam: Adding new BDD representation of endpoint ruleset (5a30b722)

client-forecastquery: Adding new BDD representation of endpoint ruleset (ada5ae32)

client-customer-profiles: Adding new BDD representation of endpoint ruleset (9de89c10)

client-migration-hub-refactor-spaces: Adding new BDD representation of endpoint ruleset (a4e5e7ba)

client-controltower: Adding new BDD representation of endpoint ruleset (b99b7a18)

client-databrew: Adding new BDD representation of endpoint ruleset (4a1bcdb9)

client-b2bi: Adding new BDD representation of endpoint ruleset (66bb63d1)

client-simspaceweaver: Adding new BDD representation of endpoint ruleset (c6617b6d)

client-emr-containers: Adding new BDD representation of endpoint ruleset (e99cccbd)

client-bcm-recommended-actions: Adding new BDD representation of endpoint ruleset (45477f08)

client-forecast: Adding new BDD representation of endpoint ruleset (5964d82b)

client-neptunedata: Adding new BDD representation of endpoint ruleset (418745d5)

client-qconnect: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call (0213a862)

client-bcm-pricing-calculator: Adding new BDD representation of endpoint ruleset (69e44c0d)

client-panorama: Adding new BDD representation of endpoint ruleset (d227732b)

client-license-manager-user-subscriptions: Adding new BDD representation of endpoint ruleset (7fd5d202)

client-partnercentral-account: Adding new BDD representation of endpoint ruleset (ad88edbb)

client-schemas: Adding new BDD representation of endpoint ruleset (d8835cfc)

client-pi: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. (b09c19bf)

client-outposts: Adding new BDD representation of endpoint ruleset (6e7917a6)

client-frauddetector: Adding new BDD representation of endpoint ruleset (9c130d58)

client-network-firewall: Adding new BDD representation of endpoint ruleset (963a1286)

client-geo-places: Adding new BDD representation of endpoint ruleset (965ac97a)

client-sesv2: Adding new BDD representation of endpoint ruleset (6f1bd2e8)

client-bedrock-agent-runtime: Adding new BDD representation of endpoint ruleset (7ac37e3a)

client-rbin: Adding new BDD representation of endpoint ruleset (5e73fd45)

client-codestar-notifications: Adding new BDD representation of endpoint ruleset (d95ca14c)

client-application-signals: Adding new BDD representation of endpoint ruleset (38a20bfa)

client-ec2: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. (bc91aa62)

client-marketplace-discovery: Adding new BDD representation of endpoint ruleset (45132960)

client-notificationscontacts: Adding new BDD representation of endpoint ruleset (e9ca97ab)

... (truncated)

Changelog

Sourced from @aws-sdk/s3-request-presigner's changelog.

3.1053.0 (2026-05-22)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1052.0 (2026-05-21)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1051.0 (2026-05-20)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1050.0 (2026-05-19)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1049.0 (2026-05-18)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1048.0 (2026-05-15)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1047.0 (2026-05-14)

... (truncated)

Commits

ef69ea6 Publish v3.1053.0
443d6be Publish v3.1052.0
0d6242d chore(codegen): update @smithy dependencies (#8038)
b825c13 Publish v3.1051.0
bdc9fc6 Publish v3.1050.0
04d52f3 Publish v3.1049.0
313813d Publish v3.1048.0
901b75a chore(packages): update import paths (#8024)
eabae7d chore(codegen): sync for browser bundle fixes (#8022)
8edb907 Publish v3.1047.0
Additional commits viewable in compare view

Updates @opentelemetry/api from 1.7.0 to 1.9.1

Release notes

Sourced from @opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

fix(api): prioritize esnext export condition as it is more specific #5458

fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395

fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @overbalance

fix(diag): change types in DiagComponentLogger from any to unknown#5478 @loganrosen

fix(api): re-introduce fallback chain for global utils #6523 @pichlermarc

🏠 (Internal)

refactor(api): refactor to avoid circular deps by merging observable types into Metric.ts #6441 @pichlermarc

refactor(api): remove "export *" in favor of explicit named exports #4880 @robbkidd

chore: enable tsconfig isolatedModules #5697 @legendecas

chore: disallow constructor parameter property syntax #6187 @legendecas

refactor(api): remove platform-specific globalThis, use globalThis directly #6208 @overbalance

chore(api): mark ProxyTracerProvider as deprecated #6328 @cjihrig

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(api): improve isValidSpanId, isValidTraceId performance #5714 @seemk

api/v1.9.0

1.9.0

🚀 (Enhancement)

feat(metrics): added synchronous gauge #4528 @clintonb

feat(api): allow adding span links after span creation #4536 @seemk

This change is non-breaking for end-users, but breaking for Trace SDK implmentations in accordance with the specification as new features need to be implemented.

feat: support node 22 #4666 @dyladan

API v1.8.0

🚀 (Enhancement)

feat(api): add SugaredTracer for functions not defined in the spec #3317 @secustor

🐛 (Bug Fix)

fix(api): fix unreachable @opentelemetry/api/experimental entry #4446 @legendecas

Changelog

Sourced from @opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

fix: avoid grpc types dependency #3551 @flarna

fix(otlp-proto-exporter-base): Match Accept header with Content-Type in the proto exporter #3562 @scheler

fix: include tracestate in export #3569 @flarna

🏠 (Internal)

chore: fix cross project links and missing implicitly exported types #3533 @legendecas

feat(sdk-metrics): add exponential histogram mapping functions #3504 @mwear

1.9.0

🚀 (Enhancement)

feat(instrumentation-grpc): set net.peer.name and net.peer.port on client spans #3430

feat(exporter-trace-otlp-proto): Add protobuf otlp trace exporter support for browser #3208 @pkanal

🐛 (Bug Fix)

fix(sdk-metrics): use default Resource to comply with semantic conventions #3411 @pichlermarc

Metrics exported by the SDK now contain the following resource attributes by default:

service.name

telemetry.sdk.name

telemetry.sdk.language

telemetry.sdk.version

fix(sdk-metrics): use Date.now() for instrument recording timestamps #3514 @MisterSquishy

fix(sdk-trace): make spans resilient to clock drift #3434 @dyladan

fix(selenium-tests): updated webpack version for selenium test issue #3456 @SaumyaBhushan

fix(sdk-metrics): collect metrics when periodic exporting metric reader flushes #3517 @legendecas

fix(sdk-metrics): fix duplicated registration of metrics for collectors #3488 @legendecas

fix(core): fix precision loss in numberToHrtime #3480 @legendecas

🏠 (Internal)

chore: automatically generate tsconfigs #3432 @legendecas

chore: enforce format with prettier #3444 @legendecas

1.8.0

@opentelemetry/sdk-metrics has been promoted to stable

@opentelemetry/api-metrics has been merged into @opentelemetry/api and deprecated

💥 Breaking Change

feat(api): merge api-metrics into api #3374 @legendecas

... (truncated)

Commits

279458e Release 1.9.1 / 0.35.1 (#3573)
4978743 fix(http): remove outgoing headers normalization (#3557)
d1f9594 chore(deps): update dependency rimraf to v4 (#3532)
e0abcc0 fix: remove JSON syntax error and regenerate tsconfig files (#3566)
a90c558 fix(sdk-node): register instrumentations early (#3502)
5b070b8 fix: include TraceState in trace exports (#3569)
dcb09b7 chore(deps): update dependency gh-pages to v5 (#3571)
3bc93a9 feat: exponential histogram - part 1 - mapping functions (#3504)
3670071 fix: avoid grpc types dependency (#3551)
b5ef0e4 chore: fix proto generation (#3567)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/api since your current version.

Updates @opentelemetry/auto-instrumentations-node from 0.40.3 to 0.76.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.76.0

0.76.0 (2026-05-13)

Features

deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-bunyan bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-connect bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-cucumber bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-dataloader bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dns bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-express bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-fs bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-graphql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-hapi bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-ioredis bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-knex bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-koa bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-memcached bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mongodb bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-mongoose bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mysql bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-net bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-openai bumped from ^0.15.0 to ^0.16.0

@opentelemetry/instrumentation-oracledb bumped from ^0.42.0 to ^0.43.0

@opentelemetry/instrumentation-pg bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-pino bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-redis bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-restify bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-router bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-socket.io bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-tedious bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-undici bumped from ^0.27.0 to ^0.28.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.76.0 (2026-05-13)

Features

deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-bunyan bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-connect bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-cucumber bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-dataloader bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dns bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-express bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-fs bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-graphql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-hapi bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-ioredis bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-knex bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-koa bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-memcached bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mongodb bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-mongoose bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mysql bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-net bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-openai bumped from ^0.15.0 to ^0.16.0

@opentelemetry/instrumentation-oracledb bumped from ^0.42.0 to ^0.43.0

@opentelemetry/instrumentation-pg bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-pino bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-redis bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-restify bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-router bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-socket.io bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-tedious bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-undici bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-winston bumped from ^0.61.0 to ^0.62.0

... (truncated)

Commits

15ef750 chore: release main (#3508)
e26a90a feat(deps): update deps matching '@opentelemetry/*' (#3523)
b68fb6d chore: release main (#3498)
e1ef3d1 feat(deps): update deps matching '@opentelemetry/*' (#3507)
03ed3a3 chore: release main (#3481)
a91133a feat(deps): update deps matching '@opentelemetry/*' (#3497)
bd017c8 chore: release main (#3451)
8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
36a030c chore: switch to short license header (#3476)
ed97091 chore: release main (#3415)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/auto-instrumentations-node since your current version.

Updates @opentelemetry/exporter-trace-otlp-http from 0.48.0 to 0.218.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

refactor(sdk-logs): use Logger.enabled() within Logger.emit() implementation #6680 @david-luna

experimental/v0.217.0

0.217.0

🚀 Features

feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @pichlermarc

feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @MikeGoldsmith

feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @trentm

Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).

If log_level is not specified, a diagnostic console logger at "info" level will be setup.

An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @trentm

fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @trentm

fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @trentm

fix(configuration): improve handling of enums in generated types #6659 @trentm

fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @trentm

fix(sampler-jaeger-remote): add missing axios dep #6656 @trentm

fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @homanp

experimental/v0.216.0

0.216.0

🚀 Features

feat(sdk-node): wire attribute_keys from declarative configuration to ViewOptions.attributesProcessors #6427 @ravitheja4531-cell

feat(sdk-node): set TracerProvider in startNodeSDK() #6607 @maryliag

🐛 Bug Fixes

fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @david-luna

fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @brunorodmoreira

... (truncated)

Commits

06ad0ea chore: prepare next release (#6703)
38ca257 feat(otlp-transformer): replace protobufjs metrics serialization with custom ...
013c600 chore: prepare next release (#6699)
b7a0c63 feat(semantic-conventions): update semantic conventions to v1.41.1 (#6695)
774143b chore(renovate): add minimumReleaseAge to config (#6697)
e0dafe0 fix(otlp-exporter-base): remove brackets from IPv6 hostname in HTTP transport...
f804c93 chore(deps): update github/codeql-action digest to 68bde55 (#6682)
95e48e7 refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions (...
907b627 feat(sdk-node): allow startNodeSDK() without an arg (#6688)
0d15261 docs: Add SIG meeting info and welcoming language (#6689)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, ...

Description has been truncated

… 25 updates Bumps the minor-and-patch group with 24 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.957.0` | `3.1053.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.957.0` | `3.1053.0` | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.7.0` | `1.9.1` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.40.3` | `0.76.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.218.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.218.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.41.1` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.66.2` | `5.77.3` | | [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.1.1` | | [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `1.4.13` | `2.1.0` | | [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.18.0` | | [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.17.4` | | [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.0` | `2.16.1` | | [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc) | `6.2.8` | `6.3.0` | | [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.4` | `0.17.6` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.50.1` | `8.59.4` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.50.1` | `8.59.4` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.16` | `4.1.7` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` | | [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.3` | | [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` | | [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `2.0.16` | `7.2.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.16` | `4.1.7` | Updates `@aws-sdk/client-s3` from 3.957.0 to 3.1053.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1053.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.957.0 to 3.1053.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1053.0/packages/s3-request-presigner) Updates `@opentelemetry/api` from 1.7.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.7.0...v1.9.1) Updates `@opentelemetry/auto-instrumentations-node` from 0.40.3 to 0.76.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.76.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.48.0 to 0.218.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.218.0) Updates `@opentelemetry/sdk-node` from 0.48.0 to 0.218.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.218.0) Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.41.1) Updates `bullmq` from 5.66.2 to 5.77.3 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.66.2...v5.77.3) Updates `ioredis` from 5.8.2 to 5.10.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.8.2...v5.10.1) Updates `multer` from 2.0.2 to 2.1.1 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.0.2...v2.1.1) Updates `@types/multer` from 1.4.13 to 2.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer) Updates `pdfkit` from 0.17.2 to 0.18.0 - [Release notes](https://github.com/foliojs/pdfkit/releases) - [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md) - [Commits](foliojs/pdfkit@v0.17.2...v0.18.0) Updates `sanitize-html` from 2.17.0 to 2.17.4 - [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md) - [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html) Updates `@types/sanitize-html` from 2.16.0 to 2.16.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html) Updates `swagger-jsdoc` from 6.2.8 to 6.3.0 - [Release notes](https://github.com/Surnet/swagger-jsdoc/releases) - [Changelog](https://github.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md) - [Commits](Surnet/swagger-jsdoc@v6.2.8...v6.3.0) Updates `@types/multer` from 1.4.13 to 2.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer) Updates `@types/pdfkit` from 0.17.4 to 0.17.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pdfkit) Updates `@types/sanitize-html` from 2.16.0 to 2.16.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html) Updates `@typescript-eslint/eslint-plugin` from 8.50.1 to 8.59.4 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.50.1 to 8.59.4 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/parser) Updates `@vitest/coverage-v8` from 4.0.16 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/coverage-v8) Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5) Updates `prettier` from 3.7.4 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.7.4...3.8.3) Updates `supertest` from 7.1.4 to 7.2.2 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.1.4...v7.2.2) Updates `@types/supertest` from 2.0.16 to 7.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) Updates `tsx` from 4.21.0 to 4.22.3 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.22.3) Updates `vitest` from 4.0.16 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1053.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1053.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.218.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.218.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: bullmq dependency-version: 5.77.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ioredis dependency-version: 5.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/multer" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: minor-and-patch - dependency-name: pdfkit dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sanitize-html dependency-version: 2.17.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/sanitize-html" dependency-version: 2.16.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: swagger-jsdoc dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/multer" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: minor-and-patch - dependency-name: "@types/pdfkit" dependency-version: 0.17.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/sanitize-html" dependency-version: 2.16.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.59.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.59.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-prettier dependency-version: 5.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: supertest dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/supertest" dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.22.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-25T11:55:32Z

Labels

The following labels could not be found: backend, dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(backend): bump the minor-and-patch group across 1 directory with 25 updates#37

deps(backend): bump the minor-and-patch group across 1 directory with 25 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-0f3d43bc93

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026

v3.1053.0

3.1053.0(2026-05-22)

Documentation Changes

New Features

3.1053.0 (2026-05-22)

3.1052.0 (2026-05-21)

3.1051.0 (2026-05-20)

3.1050.0 (2026-05-19)

3.1049.0 (2026-05-18)

Bug Fixes

3.1048.0 (2026-05-15)

v3.1053.0

3.1053.0(2026-05-22)

Documentation Changes

New Features

3.1053.0 (2026-05-22)

3.1052.0 (2026-05-21)

3.1051.0 (2026-05-20)

3.1050.0 (2026-05-19)

3.1049.0 (2026-05-18)

3.1048.0 (2026-05-15)

3.1047.0 (2026-05-14)

api/v1.9.1

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

api/v1.9.0

1.9.0

🚀 (Enhancement)

API v1.8.0

🚀 (Enhancement)

🐛 (Bug Fix)

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

1.9.0

🚀 (Enhancement)

🐛 (Bug Fix)

🏠 (Internal)

1.8.0

💥 Breaking Change

auto-instrumentations-node: v0.76.0

0.76.0 (2026-05-13)

Features

Dependencies

0.76.0 (2026-05-13)

Features

Dependencies

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

experimental/v0.217.0

0.217.0

🚀 Features

🐛 Bug Fixes

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants