Skip to content

chore(deps):(deps): bump the production-minor group across 1 directory with 20 updates#386

Open
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-minor-90e4ea9aa5
Open

chore(deps):(deps): bump the production-minor group across 1 directory with 20 updates#386
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-minor-90e4ea9aa5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 3, 2026 •
edited by cubic-dev-ai bot
Loading

Bumps the production-minor group with 20 updates in the / directory:

Package From To
@auth0/auth0-react 2.11.0 2.16.1
@aws-sdk/client-dynamodb 3.1023.0 3.1024.0
@aws-sdk/client-ec2 3.1023.0 3.1024.0
@aws-sdk/client-eks 3.1023.0 3.1024.0
@aws-sdk/client-kms 3.1023.0 3.1024.0
@aws-sdk/client-rds 3.1023.0 3.1024.0
@aws-sdk/client-s3 3.1023.0 3.1024.0
@aws-sdk/lib-dynamodb 3.1023.0 3.1024.0
@aws-sdk/s3-request-presigner 3.1023.0 3.1024.0
@openai/codex 0.116.0 0.118.0
@opentelemetry/auto-instrumentations-node 0.67.3 0.72.0
@opentelemetry/exporter-metrics-otlp-http 0.212.0 0.214.0
@opentelemetry/exporter-trace-otlp-grpc 0.212.0 0.214.0
@opentelemetry/exporter-trace-otlp-http 0.212.0 0.214.0
@opentelemetry/resources 2.5.1 2.6.1
@opentelemetry/sdk-node 0.212.0 0.214.0
@opentelemetry/sdk-trace-base 2.5.1 2.6.1
@opentelemetry/sdk-trace-node 2.5.1 2.6.1
oxlint-tsgolint 0.18.1 0.19.0
three 0.182.0 0.183.2

Updates @auth0/auth0-react from 2.11.0 to 2.16.1

Release notes

Sourced from @​auth0/auth0-react's releases.

v2.16.1

Changed

v2.16.0

Added

Changed

v2.15.1

Changed

v2.15.0

Added

v2.14.0

Added

Changed

v2.13.0

Added

v2.12.0

Added

Changelog

Sourced from @​auth0/auth0-react's changelog.

v2.16.1 (2026-03-31)

Full Changelog

Changed

v2.16.0 (2026-03-25)

Full Changelog

Added

Changed

v2.15.1 (2026-03-13)

Full Changelog

Changed

v2.15.0 (2026-02-17)

Full Changelog

Added

v2.14.0 (2026-02-13)

Full Changelog

Added

Changed

v2.13.0 (2026-02-05)

Full Changelog

Added

v2.12.0 (2026-01-28)

Full Changelog

Added

Commits
  • ca1786c Release v2.16.1 (#1072)
  • e661192 chore(deps): bump @​auth0/auth0-spa-js from 2.18.2 to 2.18.3 (#1068)
  • 71d2ac2 chore(deps-dev): bump rollup-plugin-typescript2 from 0.36.0 to 0.37.0 (#1071)
  • 432803c chore(deps-dev): bump @​typescript-eslint/eslint-plugin from 8.57.2 to 8.58.0 ...
  • 47caafa chore(deps-dev): bump @​typescript-eslint/parser from 8.57.2 to 8.58.0 (#1069)
  • 3d8cd27 chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /examples/users-api...
  • 18e7257 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#1066)
  • 2ec1601 chore(deps): bump @​auth0/auth0-spa-js from 2.18.0 to 2.18.2 (#1065)
  • f5e0503 chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 (#1064)
  • c361a1f chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#1061)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​auth0/auth0-react since your current version.


Updates @aws-sdk/client-dynamodb from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-dynamodb

Commits

Updates @aws-sdk/client-ec2 from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-ec2's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-ec2's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-ec2

Commits

Updates @aws-sdk/client-eks from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-eks's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-eks's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-eks

Commits

Updates @aws-sdk/client-kms from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-kms's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-kms's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-kms

Commits

Updates @aws-sdk/client-rds from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-rds's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-rds's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-rds

Commits

Updates @aws-sdk/client-s3 from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/lib-dynamodb from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/lib-dynamodb's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/lib-dynamodb's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/lib-dynamodb

Commits

Updates @aws-sdk/s3-request-presigner from 3.1023.0 to 3.1024.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1024.0

3.1024.0(2026-04-03)

Documentation Changes
  • client-organizations: Updates close Account quota for member accounts in an Organization. (4bc933f4)
  • client-bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (96ae995b)
New Features
  • client-bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. (2d57cd61)
  • client-medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. (b9ff368c)
  • client-imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters (0d392c90)
  • client-cloudwatch-logs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. (c4b9df8e)
  • client-payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions (76274743)
  • client-bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. (4aa232cc)
  • client-lightsail: Add support for tagging of Alarm resource type (ad9e0d71)

For list of updated packages, view updated-packages.md in assets-3.1024.0.zip

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1024.0 (2026-04-03)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @openai/codex from 0.116.0 to 0.118.0

Release notes

Sourced from @​openai/codex's releases.

0.118.0

New Features

  • Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (#12220)
  • App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (#15525)
  • codex exec now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (#15917)
  • Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (#16286, #16287, #16288)

Bug Fixes

  • Project-local .codex files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (#15067)
  • Linux sandbox launches are more reliable because Codex once again finds a trusted system bwrap on normal multi-entry PATHs. (#15791, #15973)
  • The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, /copy and /resume <name> work again, /agent no longer shows stale threads, and the skills picker scrolls past the first page. (#16013, #16021, #16050, #16014, #16109, #16110)
  • MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (#16080, #16041)
  • On Windows, apply_patch is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (#16030)

Changelog

Full Changelog: openai/codex@rust-v0.117.0...rust-v0.118.0

... (truncated)

Commits

Updates @opentelemetry/auto-instrumentations-node from 0.67.3 to 0.72.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.72.0

0.72.0 (2026-03-25)

⚠ BREAKING CHANGES

  • auto-instrumentations-node, instrumentation-fastify: remove instrumentation-fastify (#3409)

Features

  • auto-instrumentations-node, instrumentation-fastify: remove instrumentation-fastify (#3409) (ac26e9a)
  • deps: update deps matching '@opentelemetry/*' (#3450) (c8df394)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-express bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.22.0 to ^0.23.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-net bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.11.0 to ^0.12.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.58.0 to ^0.59.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.72.0 (2026-03-25)

⚠ BREAKING CHANGES

  • auto-instrumentations-node, instrumentation-fastify: remove instrumentation-fastify (#3409)

Features

  • auto-instrumentations-node, instrumentation-fastify: remove instrumentation-fastify (#3409) (ac26e9a)
  • deps: update deps matching '@opentelemetry/*' (#3450) (c8df394)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-express bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.22.0 to ^0.23.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-net bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.11.0 to ^0.12.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/ins...

        Description has been truncated

        Summary by cubic

        Upgrade production dependencies to current minor versions for auth, AWS SDK, telemetry, and 3D rendering. Highlights: @auth0/auth0-react 2.16.1, AWS SDK v3.1024, OpenTelemetry exporters/core 0.214/2.6, @openai/codex 0.118.0, and three 0.183.2.

        • Dependencies

          • Auth: @auth0/auth0-react → 2.16.1.
          • AWS SDK: v3.1024 across DynamoDB, S3, EC2, EKS, KMS, RDS, lib-dynamodb, and s3-request-presigner.
          • Observability: @opentelemetry/auto-instrumentations-node → 0.72.0; exporters/resources/sdk updated to 0.214.0/2.6.1.
          • Tooling: @openai/codex → 0.118.0, oxlint-tsgolint → 0.19.0, three → 0.183.2.

        • Migration

          • Telemetry: @opentelemetry/auto-instrumentations-node@0.72.0 no longer includes Fastify instrumentation. If you need it, pin to 0.71.x or add manual instrumentation.
          • 3D: Verify three scenes and loaders in critical views for minor API changes.

        Written for commit d1c7402d531f3d2c50c53cbecc0ac37fe8bd6906. Summary will update on new commits.

@dependabot
chore(deps):(deps): bump the production-minor group across 1 director…
d1c7402 
…y with 20 updates

Bumps the production-minor group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth0/auth0-react](https://github.com/auth0/auth0-react) | `2.11.0` | `2.16.1` |
| [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/client-ec2](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ec2) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/client-eks](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-eks) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/client-kms](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kms) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/client-rds](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-rds) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/lib-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-dynamodb) | `3.1023.0` | `3.1024.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1023.0` | `3.1024.0` |
| [@openai/codex](https://github.com/openai/codex/tree/HEAD/codex-cli) | `0.116.0` | `0.118.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.67.3` | `0.72.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.214.0` |
| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.214.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.214.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.1` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.214.0` |
| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.1` |
| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.1` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.18.1` | `0.19.0` |
| [three](https://github.com/mrdoob/three.js) | `0.182.0` | `0.183.2` |



Updates `@auth0/auth0-react` from 2.11.0 to 2.16.1
- [Release notes](https://github.com/auth0/auth0-react/releases)
- [Changelog](https://github.com/auth0/auth0-react/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-react@v2.11.0...v2.16.1)

Updates `@aws-sdk/client-dynamodb` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-dynamodb)

Updates `@aws-sdk/client-ec2` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ec2/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-ec2)

Updates `@aws-sdk/client-eks` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-eks/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-eks)

Updates `@aws-sdk/client-kms` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kms/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-kms)

Updates `@aws-sdk/client-rds` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-rds/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-rds)

Updates `@aws-sdk/client-s3` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/clients/client-s3)

Updates `@aws-sdk/lib-dynamodb` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-dynamodb/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/lib/lib-dynamodb)

Updates `@aws-sdk/s3-request-presigner` from 3.1023.0 to 3.1024.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1024.0/packages/s3-request-presigner)

Updates `@openai/codex` from 0.116.0 to 0.118.0
- [Release notes](https://github.com/openai/codex/releases)
- [Commits](https://github.com/openai/codex/commits/rust-v0.118.0/codex-cli)

Updates `@opentelemetry/auto-instrumentations-node` from 0.67.3 to 0.72.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.72.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.212.0 to 0.214.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.214.0)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.212.0 to 0.214.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.214.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.212.0 to 0.214.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.214.0)

Updates `@opentelemetry/resources` from 2.5.1 to 2.6.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.1)

Updates `@opentelemetry/sdk-node` from 0.212.0 to 0.214.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.214.0)

Updates `@opentelemetry/sdk-trace-base` from 2.5.1 to 2.6.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.1)

Updates `@opentelemetry/sdk-trace-node` from 2.5.1 to 2.6.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.1)

Updates `oxlint-tsgolint` from 0.18.1 to 0.19.0
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v0.18.1...v0.19.0)

Updates `three` from 0.182.0 to 0.183.2
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

---
updated-dependencies:
- dependency-name: "@auth0/auth0-react"
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-dynamodb"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-ec2"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-eks"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-kms"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-rds"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/lib-dynamodb"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1024.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@openai/codex"
  dependency-version: 0.118.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: oxlint-tsgolint
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: three
  dependency-version: 0.183.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 3, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Apr 3, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pixelated Ready Ready Preview, Comment Apr 3, 2026 11:53pm

cubic-dev-ai[bot]
cubic-dev-ai bot reviewed Apr 3, 2026
View reviewed changes
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cubic-dev-ai cubic-dev-ai[bot] cubic-dev-ai[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants