feat(deps): bump the opentelemetry group across 1 directory with 5 updates#19659
feat(deps): bump the opentelemetry group across 1 directory with 5 updates#19659dependabot[bot] wants to merge 1 commit intodevelopfrom
Conversation
…dates Bumps the opentelemetry group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.40.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` | | [@opentelemetry/context-async-hooks](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.6.0` | Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.40.0) Updates `@opentelemetry/core` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0) Updates `@opentelemetry/context-async-hooks` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0) Updates `@opentelemetry/resources` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0) Updates `@opentelemetry/sdk-trace-base` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.6.0) --- updated-dependencies: - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry - dependency-name: "@opentelemetry/core" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry - dependency-name: "@opentelemetry/context-async-hooks" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry - dependency-name: "@opentelemetry/resources" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| "@opentelemetry/resources": "^1.30.1 || ^2.1.0", | ||
| "@opentelemetry/sdk-trace-base": "^1.30.1 || ^2.1.0", | ||
| "@opentelemetry/semantic-conventions": "^1.39.0" | ||
| "@opentelemetry/semantic-conventions": "^1.40.0" |
There was a problem hiding this comment.
Peer dependency minimum bump breaks existing consumers needlessly
Medium Severity
The peerDependencies minimum for @opentelemetry/semantic-conventions was narrowed from ^1.39.0 to ^1.40.0 in both packages/node-core/package.json and packages/opentelemetry/package.json, but no source code in this PR uses any new exports from v1.40.0 (the only new stable exports are ATTR_SERVICE_INSTANCE_ID and ATTR_SERVICE_NAMESPACE, neither of which appears in the codebase). This is a breaking change for consumers who have @opentelemetry/semantic-conventions@1.39.x installed — they'll now get peer dependency conflicts. This was flagged because the review rules require flagging breaking public API changes without proper deprecation.
Additional Locations (1)
Triggered by project rule: PR Review Guidelines for Cursor Bot


Bumps the opentelemetry group with 5 updates in the / directory:
1.39.01.40.02.5.12.6.02.5.12.6.02.5.12.6.02.5.12.6.0Updates
@opentelemetry/semantic-conventionsfrom 1.39.0 to 1.40.0Release notes
Sourced from
@opentelemetry/semantic-conventions's releases.... (truncated)
Commits
661cd84chore: update all license headers to SPDX short format (#6447)ed6bd6dchore: prepare next release (#6448)636d1d0feat(semantic-conventions): update semantic conventions to v1.40.0 (#6438)1bffafafix(instrumentation-http): guard against double-instrumentation if loaded wit...f7cd6abrefactor(api): refactor to avoid circular deps, add dpdm to lint step (#6441)bffd65ffix(deps): update dependency google-protobuf to v4 (#6411)8479a91chore(deps): update dependency@types/jqueryto v3.5.34 (#6443)99d6e15fix(otlp-exporter-base): handle response error event (#6412)200cf9afix(api): Update DiagLogger to use original console methods (#6395)b1beebbchore(deps): update github/codeql-action digest to 89a39a4 (#6436)Updates
@opentelemetry/corefrom 2.5.1 to 2.6.0Release notes
Sourced from
@opentelemetry/core's releases.Changelog
Sourced from
@opentelemetry/core's changelog.Commits
541e1b4chore: prepare next release (#6464)30f94fefeat(instrumentation-http): providehttp.request.header.\<key>at server spa...2ac44adrefactor(context-zone-peer-dep): remove unnecessary helper methods and use me...600e51dchore(deps): update github/codeql-action digest to c793b71 (#6458)ae30abfchore(deps): update dependency@types/jqueryto v4 (#6456)6387d3cchore(release): use the HEAD commit as the target for draft GH release creati...4cd3644fix(deps): update dependency import-in-the-middle to v3 (#6403)65c9d9fdocs: fix changelog PR number typo (#6453)3db56bafix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...dcbead5fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...Updates
@opentelemetry/context-async-hooksfrom 2.5.1 to 2.6.0Release notes
Sourced from
@opentelemetry/context-async-hooks's releases.Changelog
Sourced from
@opentelemetry/context-async-hooks's changelog.Commits
541e1b4chore: prepare next release (#6464)30f94fefeat(instrumentation-http): providehttp.request.header.\<key>at server spa...2ac44adrefactor(context-zone-peer-dep): remove unnecessary helper methods and use me...600e51dchore(deps): update github/codeql-action digest to c793b71 (#6458)ae30abfchore(deps): update dependency@types/jqueryto v4 (#6456)6387d3cchore(release): use the HEAD commit as the target for draft GH release creati...4cd3644fix(deps): update dependency import-in-the-middle to v3 (#6403)65c9d9fdocs: fix changelog PR number typo (#6453)3db56bafix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...dcbead5fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...Updates
@opentelemetry/resourcesfrom 2.5.1 to 2.6.0Release notes
Sourced from
@opentelemetry/resources's releases.Changelog
Sourced from
@opentelemetry/resources's changelog.Commits
541e1b4chore: prepare next release (#6464)30f94fefeat(instrumentation-http): providehttp.request.header.\<key>at server spa...2ac44adrefactor(context-zone-peer-dep): remove unnecessary helper methods and use me...600e51dchore(deps): update github/codeql-action digest to c793b71 (#6458)ae30abfchore(deps): update dependency@types/jqueryto v4 (#6456)6387d3cchore(release): use the HEAD commit as the target for draft GH release creati...4cd3644fix(deps): update dependency import-in-the-middle to v3 (#6403)65c9d9fdocs: fix changelog PR number typo (#6453)3db56bafix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...dcbead5fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...Updates
@opentelemetry/sdk-trace-basefrom 2.5.1 to 2.6.0Release notes
Sourced from
@opentelemetry/sdk-trace-base's releases.Changelog
Sourced from
@opentelemetry/sdk-trace-base's changelog.Commits
541e1b4chore: prepare next release (#6464)30f94fefeat(instrumentation-http): providehttp.request.header.\<key>at server spa...2ac44adrefactor(context-zone-peer-dep): remove unnecessary helper methods and use me...600e51dchore(deps): update github/codeql-action digest to c793b71 (#6458)ae30abfchore(deps): update dependency@types/jqueryto v4 (#6456)6387d3cchore(release): use the HEAD commit as the target for draft GH release creati...4cd3644fix(deps): update dependency import-in-the-middle to v3 (#6403)65c9d9fdocs: fix changelog PR number typo (#6453)3db56bafix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...dcbead5fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions