Skip to content

chore(deps): bump @opentelemetry/core and @sentry/profiling-node#218

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7b4642c86d
Open

chore(deps): bump @opentelemetry/core and @sentry/profiling-node#218
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7b4642c86d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps @opentelemetry/core to 2.9.0 and updates ancestor dependency @sentry/profiling-node. These dependencies need to be updated together.

Updates @opentelemetry/core from 2.7.1 to 2.9.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.9.0

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

v2.8.0

2.8.0

🚀 Features

  • feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @​mcollina
  • feat(sdk-metrics): implement metric reader self-observability metrics #6449 @​anuraaga
  • feat(core): add hrTimeToSeconds #6449 @​anuraaga

🐛 Bug Fixes

  • fix(core): limit processing of incoming "baggage" header to 8192 bytes @​pichlermarc
Changelog

Sourced from @​opentelemetry/core's changelog.

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

2.8.0

🚀 Features

  • feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @​mcollina
  • feat(sdk-metrics): implement metric reader self-observability metrics #6449 @​anuraaga
  • feat(core): add hrTimeToSeconds #6449 @​anuraaga

🐛 Bug Fixes

  • fix(core): limit processing of incoming "baggage" header to 8192 bytes @​pichlermarc
Commits
  • 40d67b7 chore: prepare next release (#6869)
  • b1c196d Merge commit from fork
  • d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
  • d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
  • 9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
  • c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
  • dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
  • 991434c chore(deps): update dependency @​bufbuild/buf to v1.71.0 (#6863)
  • 69303d0 chore(deps): update all patch versions (#6862)
  • 6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
  • Additional commits viewable in compare view

Updates @sentry/profiling-node from 10.53.1 to 10.66.0

Release notes

Sourced from @​sentry/profiling-node's releases.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)
  • ref(nuxt): Build the Nuxt module in-house instead of @​nuxt/module-builder (#22190)

... (truncated)

Changelog

Sourced from @​sentry/profiling-node's changelog.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)

... (truncated)

Commits
  • 323cbf6 release: 10.66.0
  • 85d0619 Merge pull request #22315 from getsentry/prepare-release/10.66.0
  • bddcb83 meta(changelog): Update changelog for 10.66.0
  • 595e940 feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • 667cb71 fix(browser): Propagate trace data from active span if http.client span is ...
  • e8d7bd4 fix(core): Preserve propagation across ignored spans (#22277)
  • bd69bd9 chore(node-core): Deprecate @sentry/node-core package (#22285)
  • c04ebda fix(react): Preserve parent path prefix for descendant route names in `react-...
  • 2cbacb5 feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22...
  • c9716eb feat(server-utils): Capture and log orchestrion stats (#22269)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.9.0 and updates ancestor dependency [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript). These dependencies need to be updated together.


Updates `@opentelemetry/core` from 2.7.1 to 2.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.9.0)

Updates `@sentry/profiling-node` from 10.53.1 to 10.66.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.53.1...10.66.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.9.0
  dependency-type: indirect
- dependency-name: "@sentry/profiling-node"
  dependency-version: 10.66.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants