Skip to content

feat(deps): bump the opentelemetry group across 1 directory with 5 updates#19659

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/opentelemetry-a3e908dd0d
Open

feat(deps): bump the opentelemetry group across 1 directory with 5 updates#19659
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/opentelemetry-a3e908dd0d

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 5, 2026

Bumps the opentelemetry group with 5 updates in the / directory:

Package From To
@opentelemetry/semantic-conventions 1.39.0 1.40.0
@opentelemetry/core 2.5.1 2.6.0
@opentelemetry/context-async-hooks 2.5.1 2.6.0
@opentelemetry/resources 2.5.1 2.6.0
@opentelemetry/sdk-trace-base 2.5.1 2.6.0

Updates @opentelemetry/semantic-conventions from 1.39.0 to 1.40.0

Release notes

Sourced from @​opentelemetry/semantic-conventions's releases.

semconv/v1.40.0

1.40.0

🚀 Features

  • feat: update semantic conventions to v1.40.0 #6438
    • Semantic Conventions v1.40.0: changelog | latest docs
    • @opentelemetry/semantic-conventions (stable) changes: 2 added exports
    • @opentelemetry/semantic-conventions/incubating (unstable) changes: 11 newly deprecated exports, 56 added exports

Stable changes in v1.40.0

ATTR_SERVICE_INSTANCE_ID // service.instance.id
ATTR_SERVICE_NAMESPACE   // service.namespace

Unstable changes in v1.40.0

METRIC_RPC_CLIENT_REQUEST_SIZE     // rpc.client.request.size: Removed, no replacement at this time.
METRIC_RPC_CLIENT_RESPONSE_SIZE    // rpc.client.response.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_REQUEST_SIZE     // rpc.server.request.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_RESPONSE_SIZE    // rpc.server.response.size: Removed, no replacement at this time.
METRIC_SYSTEM_MEMORY_SHARED        // system.memory.shared: Replaced by `system.memory.linux.shared`.
EVENT_RPC_MESSAGE                  // rpc.message: Deprecated, no replacement at this time.
ATTR_ERROR_MESSAGE                 // error.message: Use domain-specific error message attribute. For example, use `feature_flag.error.message` for feature flag errors.
ATTR_RPC_MESSAGE_COMPRESSED_SIZE   // rpc.message.compressed_size: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_ID                // rpc.message.id: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_TYPE              // rpc.message.type: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_UNCOMPRESSED_SIZE // rpc.message.uncompressed_size: Deprecated, no replacement at this time.
METRIC_JVM_FILE_DESCRIPTOR_LIMIT                 // jvm.file_descriptor.limit
METRIC_K8S_SERVICE_ENDPOINT_COUNT                // k8s.service.endpoint.count
</tr></table>

... (truncated)

Commits
  • 661cd84 chore: update all license headers to SPDX short format (#6447)
  • ed6bd6d chore: prepare next release (#6448)
  • 636d1d0 feat(semantic-conventions): update semantic conventions to v1.40.0 (#6438)
  • 1bffafa fix(instrumentation-http): guard against double-instrumentation if loaded wit...
  • f7cd6ab refactor(api): refactor to avoid circular deps, add dpdm to lint step (#6441)
  • bffd65f fix(deps): update dependency google-protobuf to v4 (#6411)
  • 8479a91 chore(deps): update dependency @​types/jquery to v3.5.34 (#6443)
  • 99d6e15 fix(otlp-exporter-base): handle response error event (#6412)
  • 200cf9a fix(api): Update DiagLogger to use original console methods (#6395)
  • b1beebb chore(deps): update github/codeql-action digest to 89a39a4 (#6436)
  • Additional commits viewable in compare view

Updates @opentelemetry/core from 2.5.1 to 2.6.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.6.0

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Changelog

Sourced from @​opentelemetry/core's changelog.

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
  • 65c9d9f docs: fix changelog PR number typo (#6453)
  • 3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
  • dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
  • Additional commits viewable in compare view

Updates @opentelemetry/context-async-hooks from 2.5.1 to 2.6.0

Release notes

Sourced from @​opentelemetry/context-async-hooks's releases.

v2.6.0

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Changelog

Sourced from @​opentelemetry/context-async-hooks's changelog.

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
  • 65c9d9f docs: fix changelog PR number typo (#6453)
  • 3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
  • dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
  • Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.5.1 to 2.6.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.6.0

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Changelog

Sourced from @​opentelemetry/resources's changelog.

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
  • 65c9d9f docs: fix changelog PR number typo (#6453)
  • 3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
  • dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
  • Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.5.1 to 2.6.0

Release notes

Sourced from @​opentelemetry/sdk-trace-base's releases.

v2.6.0

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Changelog

Sourced from @​opentelemetry/sdk-trace-base's changelog.

2.6.0

💥 Breaking Changes

  • fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @​jacksonweber
    • Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:
      • export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.
      • export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

🐛 Bug Fixes

Commits
  • 541e1b4 chore: prepare next release (#6464)
  • 30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
  • 2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
  • 600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
  • ae30abf chore(deps): update dependency @​types/jquery to v4 (#6456)
  • 6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
  • 4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
  • 65c9d9f docs: fix changelog PR number typo (#6453)
  • 3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
  • dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the opentelemetry group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.40.0` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` |
| [@opentelemetry/context-async-hooks](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` |
| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` |



Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.40.0)

Updates `@opentelemetry/core` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0)

Updates `@opentelemetry/context-async-hooks` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0)

Updates `@opentelemetry/resources` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0)

Updates `@opentelemetry/sdk-trace-base` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: "@opentelemetry/context-async-hooks"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

"@opentelemetry/resources": "^1.30.1 || ^2.1.0",
"@opentelemetry/sdk-trace-base": "^1.30.1 || ^2.1.0",
"@opentelemetry/semantic-conventions": "^1.39.0"
"@opentelemetry/semantic-conventions": "^1.40.0"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Peer dependency minimum bump breaks existing consumers needlessly

Medium Severity

The peerDependencies minimum for @opentelemetry/semantic-conventions was narrowed from ^1.39.0 to ^1.40.0 in both packages/node-core/package.json and packages/opentelemetry/package.json, but no source code in this PR uses any new exports from v1.40.0 (the only new stable exports are ATTR_SERVICE_INSTANCE_ID and ATTR_SERVICE_NAMESPACE, neither of which appears in the codebase). This is a breaking change for consumers who have @opentelemetry/semantic-conventions@1.39.x installed — they'll now get peer dependency conflicts. This was flagged because the review rules require flagging breaking public API changes without proper deprecation.

Additional Locations (1)

Fix in Cursor Fix in Web

Triggered by project rule: PR Review Guidelines for Cursor Bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants