Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 20 updates#31

Closed
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/npm_and_yarn/minor-and-patch-312f41d137
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 20 updates#31
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/npm_and_yarn/minor-and-patch-312f41d137

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps the minor-and-patch group with 18 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.26.0 1.27.0
@opentelemetry/api-logs 0.211.0 0.212.0
@opentelemetry/auto-instrumentations-node 0.69.0 0.70.0
@opentelemetry/exporter-logs-otlp-http 0.211.0 0.212.0
@opentelemetry/exporter-metrics-otlp-http 0.211.0 0.212.0
@opentelemetry/exporter-trace-otlp-http 0.211.0 0.212.0
@opentelemetry/instrumentation 0.211.0 0.212.0
@opentelemetry/instrumentation-express 0.59.0 0.60.0
@opentelemetry/instrumentation-http 0.211.0 0.212.0
@opentelemetry/instrumentation-winston 0.55.0 0.56.0
@opentelemetry/resources 2.5.0 2.5.1
@opentelemetry/sdk-logs 0.211.0 0.212.0
@opentelemetry/sdk-metrics 2.5.0 2.5.1
@opentelemetry/sdk-node 0.211.0 0.212.0
@ai-sdk/azure 3.0.27 3.0.32
@types/node 25.2.3 25.3.0
ai 6.0.79 6.0.97
dotenv 17.2.4 17.3.1

Updates @modelcontextprotocol/sdk from 1.26.0 to 1.27.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.27.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.26.0...v1.27.0

Commits
  • 8cbc658 chore: bump version for v1.27.0 (#1541)
  • 5c16ae3 [v1.x] feat(tasks): add streaming methods for elicitation and sampling (#1528)
  • 97ab379 feat: add url property to RequestInfo interface (#1353)
  • 825e9ab feat: backport discoverOAuthServerInfo() and discovery caching to v1.x (#1533)
  • b0cf837 feat: add conformance test infrastructure for v1.x (#1518)
  • See full diff in compare view

Updates @opentelemetry/api-logs from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.69.0 to 0.70.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.70.0

0.70.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

  • auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-net bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.9.0 to ^0.10.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.59.0 to ^0.60.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.70.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

  • auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.54.0 to ^0.55.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-net bumped from ^0.55.0 to ^0.56.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.9.0 to ^0.10.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.57.0 to ^0.58.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.59.0 to ^0.60.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.56.0 to ^0.57.0

... (truncated)

Commits
  • 0b33a11 chore: release main (#3365)
  • d3ac785 chore(deps): update deps matching "@opentelemetry/*" (#3383)
  • 97d9ef0 fix(auto-instrumentation-node): resource detector from env should be the last...
  • See full diff in compare view

Updates @opentelemetry/exporter-logs-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-logs-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-metrics-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/instrumentation's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-express from 0.59.0 to 0.60.0

Release notes

Sourced from @​opentelemetry/instrumentation-express's releases.

instrumentation-redis: v0.60.0

0.60.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.58.0 to ^0.59.0

instrumentation-koa: v0.60.0

0.60.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.58.0 to ^0.59.0

instrumentation-ioredis: v0.60.0

0.60.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.58.0 to ^0.59.0
Changelog

Sourced from @​opentelemetry/instrumentation-express's changelog.

0.60.0 (2026-02-16)

Features

  • deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.58.0 to ^0.59.0
Commits
  • 2300dc1 chore: improve test workflow and coverage reports (#2866)
  • ca26f63 chore: lint .js and .mjs files (in addition to the existing .ts file linting)...
  • 2120399 chore(deps): update dependency @​types/express to v5 (#2925)
  • 9d90781 chore: add test-services scripts per package (#2932)
  • e7960a2 chore: release main (#2931)
  • e4ab2a9 feat(deps): update deps matching '@opentelemetry/*' (#2930)
  • 17f4334 chore: rename workspace dirs to packages/${package-base-name} (#2928)
  • See full diff in compare view

Updates @opentelemetry/instrumentation-http from 0.211.0 to 0.212.0

Release notes

Sourced from @​opentelemetry/instrumentation-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

  • feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @​pichlermarc
    • (user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

  • feat(configuration): add Prometheus exporter support #6400 @​MikeGoldsmith
  • feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @​trentm
  • feat(configuration): parse config for rc 3 #6304 @​maryliag
  • feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @​trentm

🐛 Bug Fixes

  • fix(configuration): remove default propagator initialization #6399 @​MikeGoldsmith
  • fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @​AnubhavPurohit691
    • The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.
  • fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @​omizha
  • fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @​pichlermarc
  • fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @​david-luna

🏠 Internal

Commits
  • ad92be4 chore: prepare next release (#6402)
  • 3e68499 feat(configuration): add prometheus exporter support (#6400)
  • b743747 fix(configuration): remove default propagator initialization (#6399)
  • 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
  • 90d1afa ci: allow different release bumps for groups (#6397)
  • c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
  • a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
  • fcafab5 chore: fix lint (#6388)
  • a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
  • 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-winston from 0.55.0 to 0.56.0

Release n...

Description has been truncated

…0 updates

Bumps the minor-and-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.27.0` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.69.0` | `0.70.0` |
| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.59.0` | `0.60.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/instrumentation-winston](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-winston) | `0.55.0` | `0.56.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.5.1` |
| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.5.0` | `2.5.1` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.211.0` | `0.212.0` |
| [@ai-sdk/azure](https://github.com/vercel/ai) | `3.0.27` | `3.0.32` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.3` | `25.3.0` |
| [ai](https://github.com/vercel/ai) | `6.0.79` | `6.0.97` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.4` | `17.3.1` |



Updates `@modelcontextprotocol/sdk` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.26.0...v1.27.0)

Updates `@opentelemetry/api-logs` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/auto-instrumentations-node` from 0.69.0 to 0.70.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.70.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-logs-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation-express` from 0.59.0 to 0.60.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.60.0/packages/instrumentation-express)

Updates `@opentelemetry/instrumentation-http` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/instrumentation-winston` from 0.55.0 to 0.56.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-winston/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.56.0/packages/instrumentation-winston)

Updates `@opentelemetry/resources` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-logs` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/sdk-metrics` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-node` from 0.211.0 to 0.212.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.212.0)

Updates `@opentelemetry/sdk-trace-base` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@opentelemetry/sdk-trace-node` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.5.1)

Updates `@ai-sdk/azure` from 3.0.27 to 3.0.32
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/azure@3.0.27...@ai-sdk/azure@3.0.32)

Updates `@types/node` from 25.2.3 to 25.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ai` from 6.0.79 to 6.0.97
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@6.0.79...ai@6.0.97)

Updates `dotenv` from 17.2.4 to 17.3.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.4...v17.3.1)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-logs-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-express"
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/instrumentation-winston"
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-logs"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.212.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/azure"
  dependency-version: 3.0.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 6.0.97
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 23, 2026
@dependabot dependabot bot requested a review from maxgolov as a code owner February 23, 2026 23:22
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 23, 2026
@github-actions
Copy link

github-actions bot commented Feb 23, 2026

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
  • ⚠️ 3 packages with OpenSSF Scorecard issues.

View full job summary

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 2, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 2, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-and-patch-312f41d137 branch March 2, 2026 03:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant