Skip to content

build(deps): bump the dependencies group across 1 directory with 37 updates#307

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b85c38aa4f
Open

build(deps): bump the dependencies group across 1 directory with 37 updates#307
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b85c38aa4f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 34 updates in the / directory:

Package From To
@nestjs/common 11.1.20 11.1.28
@nestjs/core 11.1.20 11.1.28
@nestjs/platform-express 11.1.20 11.1.28
@nestjs/testing 11.1.20 11.1.28
@nestjs/websockets 11.1.20 11.1.28
@opentelemetry/auto-instrumentations-node 0.76.0 0.78.0
@opentelemetry/exporter-trace-otlp-http 0.218.0 0.220.0
@opentelemetry/sdk-node 0.218.0 0.220.0
@sentry/node 10.53.1 10.64.0
@stellar/stellar-sdk 15.1.0 16.0.1
@types/node 25.7.0 26.1.1
axios 1.16.1 1.18.1
better-sqlite3 12.10.0 12.11.1
bullmq 5.76.8 5.79.3
date-fns 4.1.0 4.4.0
express-rate-limit 8.5.1 8.5.2
form-data 4.0.5 4.0.6
graphql 16.14.0 17.0.2
helmet 8.1.0 8.2.0
ioredis 5.10.1 5.11.1
js-yaml 4.1.1 5.2.1
knex 3.2.10 3.3.0
pg 8.20.0 8.22.0
puppeteer 24.43.1 25.3.0
rate-limiter-flexible 11.1.0 11.2.0
redis 5.12.1 6.1.0
stripe 22.1.1 22.3.0
uuid 14.0.0 14.0.1
@nestjs/cli 11.0.21 11.0.23
commander 14.0.3 15.0.0
concurrently 9.2.1 10.0.3
jest 29.7.0 30.4.2
@types/jest 29.5.14 30.0.0
typescript 6.0.3 7.0.2

Updates @nestjs/common from 11.1.20 to 11.1.28

Release notes

Sourced from @​nestjs/common's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • a5e86d8 fix(common): Add missing exception classes to HttpErrorByCode
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • 1634915 test(common): Add unit tests for cli-colors utility
  • 380bf5c Merge pull request #17058 from Se3do/test/extend-metadata
  • af4542b test(common): Add unit tests for assignCustomParameterMetadata
  • b67aea1 test(common): Add unit tests for extendArrayMetadata
  • Additional commits viewable in compare view

Updates @nestjs/core from 11.1.20 to 11.1.28

Release notes

Sourced from @​nestjs/core's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 053a316 Merge pull request #17239 from jyx-07/fix/sse-interceptor-teardown
  • 8e7a2ee feat(core): include auto-converted route in legacy route path warning
  • c5b7164 fix(core): trigger sse observable teardown on disconnect
  • 660a124 chore(release): publish v11.1.27 release
  • 5c5e9ba fix(core): sse async handlers teardown issue #17128
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 0f398fd test: fix broken unit test
  • d152eec fix(core): post sse endpoint empty response #17098
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.20 to 11.1.28

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 541977a fix(deps): update dependency multer to v2.2.0 [security]
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • d8a0ab8 chore(release): publish v11.1.24 release
  • 2dccece chore: update readmes
  • b8be8c1 chore(release): publish v11.1.23 release
  • 801c46f chore(release): publish v11.1.22 release
  • Additional commits viewable in compare view

Updates @nestjs/testing from 11.1.20 to 11.1.28

Release notes

Sourced from @​nestjs/testing's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • d8a0ab8 chore(release): publish v11.1.24 release
  • 2dccece chore: update readmes
  • b8be8c1 chore(release): publish v11.1.23 release
  • 801c46f chore(release): publish v11.1.22 release
  • 983dd52 chore(release): publish v11.1.21 release
  • Additional commits viewable in compare view

Updates @nestjs/websockets from 11.1.20 to 11.1.28

Release notes

Sourced from @​nestjs/websockets's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • cf20e69 fix(websockets): correct type guard to check value not key
  • 6dbeb92 test: remove leftover debug console.log statements
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • d8a0ab8 chore(release): publish v11.1.24 release
  • 2dccece chore: update readmes
  • b8be8c1 chore(release): publish v11.1.23 release
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.76.0 to 0.78.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

  • deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.78.0 (2026-07-03)

Features

  • deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.29.0 to ^0.30.0

... (truncated)

Commits

Updates @opentelemetry/exporter-trace-otlp-http from 0.218.0 to 0.220.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

  • refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @​trentm
    • (user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).
    • interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property
    • interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions
    • (user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836
  • refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @​trentm
  • docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.
  • chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

  • feat(configuration): bump config schema to v1.1.0; rename without_scope_infoscope_info_enabled and without_target_info/developmenttarget_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labelsresource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @​MikeGoldsmith
  • feat(sdk-node): wire up id_generator from declarative config #6782 @​MikeGoldsmith
  • feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @​MikeGoldsmith
  • feat(propagator-env-carrier): empty name normalization #6827 @​pellared
  • feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @​pellared

🐛 Bug Fixes

  • fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @​anneheartrecord
  • fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @​MikeGoldsmith
  • fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @​trentm
  • fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @​MikeGoldsmith
  • fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @​MikeGoldsmith
  • fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @​trentm

📚 Documentation

  • docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @​MikeGoldsmith

🏠 Internal

  • chore(sdk-node): migrate to use the new sdk-trace package #6828 @​trentm
    • The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @​mwear

experimental/v0.219.0

0.219.0

💥 Breaking Changes

... (truncated)

Commits
  • 40d67b7 chore: prepare next release (#6869)
  • b1c196d Merge commit from fork
  • d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
  • d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
  • 9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
  • c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
  • dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
  • 991434c chore(deps): update dependency @​bufbuild/buf to v1.71.0 (#6863)
  • 69303d0 chore(deps): update all patch versions (#6862)
  • 6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
  • Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.218.0 to 0.220.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

  • refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @​trentm
    • (user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).
    • interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property
    • interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions
    • (user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836
  • refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @​trentm
  • docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.
  • chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

  • feat(configuration): bump config schema to v1.1.0; rename without_scope_infoscope_info_enabled and without_target_info/developmenttarget_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labelsresource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @​MikeGoldsmith
  • feat(sdk-node): wire up id_generator from declarative config #6782 @​MikeGoldsmith
  • feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @​MikeGoldsmith
  • feat(propagator-env-carrier): empty name normalization #6827 @​pellared
  • feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @​pellared

🐛 Bug Fixes

  • fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @​anneheartrecord
  • fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @​MikeGoldsmith
  • fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @​trentm
  • fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @​MikeGoldsmith
  • fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @​MikeGoldsmith
  • fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @​trentm

📚 Documentation

  • docs(configuration): link the configurat...

    Description has been truncated

…pdates

Bumps the dependencies group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.20` | `11.1.28` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.20` | `11.1.28` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.20` | `11.1.28` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.20` | `11.1.28` |
| [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.20` | `11.1.28` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.76.0` | `0.78.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.220.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.64.0` |
| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `15.1.0` | `16.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `26.1.1` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.1` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.10.0` | `12.11.1` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.76.8` | `5.79.3` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.1` | `8.5.2` |
| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |
| [graphql](https://github.com/graphql/graphql-js) | `16.14.0` | `17.0.2` |
| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.2.0` |
| [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `5.2.1` |
| [knex](https://github.com/knex/knex) | `3.2.10` | `3.3.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.22.0` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.43.1` | `25.3.0` |
| [rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) | `11.1.0` | `11.2.0` |
| [redis](https://github.com/redis/node-redis) | `5.12.1` | `6.1.0` |
| [stripe](https://github.com/stripe/stripe-node) | `22.1.1` | `22.3.0` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.21` | `11.0.23` |
| [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.4.2` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.14` | `30.0.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@nestjs/common` from 11.1.20 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/common)

Updates `@nestjs/core` from 11.1.20 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/core)

Updates `@nestjs/platform-express` from 11.1.20 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/platform-express)

Updates `@nestjs/testing` from 11.1.20 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/testing)

Updates `@nestjs/websockets` from 11.1.20 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/websockets)

Updates `@opentelemetry/auto-instrumentations-node` from 0.76.0 to 0.78.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.78.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.218.0 to 0.220.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.220.0)

Updates `@opentelemetry/sdk-node` from 0.218.0 to 0.220.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.220.0)

Updates `@opentelemetry/sdk-trace-base` from 2.7.1 to 2.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.9.0)

Updates `@sentry/node` from 10.53.1 to 10.64.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.53.1...10.64.0)

Updates `@stellar/stellar-sdk` from 15.1.0 to 16.0.1
- [Release notes](https://github.com/stellar/js-stellar-sdk/releases)
- [Changelog](https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md)
- [Commits](stellar/js-stellar-sdk@v15.1.0...v16.0.1)

Updates `@types/node` from 25.7.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `axios` from 1.16.1 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.18.1)

Updates `better-sqlite3` from 12.10.0 to 12.11.1
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v12.10.0...v12.11.1)

Updates `bullmq` from 5.76.8 to 5.79.3
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.76.8...v5.79.3)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `express-rate-limit` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.1...v8.5.2)

Updates `form-data` from 4.0.5 to 4.0.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

Updates `graphql` from 16.14.0 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.0...v17.0.2)

Updates `graphql-tag` from 2.12.6 to 2.12.7
- [Release notes](https://github.com/apollographql/graphql-tag/releases)
- [Changelog](https://github.com/apollographql/graphql-tag/blob/main/CHANGELOG.md)
- [Commits](apollographql/graphql-tag@v2.12.6...v2.12.7)

Updates `helmet` from 8.1.0 to 8.2.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.1.0...v8.2.0)

Updates `ioredis` from 5.10.1 to 5.11.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.10.1...v5.11.1)

Updates `js-yaml` from 4.1.1 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.1...5.2.1)

Updates `knex` from 3.2.10 to 3.3.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@3.2.10...3.3.0)

Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.1.1...v2.2.0)

Updates `pg` from 8.20.0 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `puppeteer` from 24.43.1 to 25.3.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.43.1...puppeteer-v25.3.0)

Updates `rate-limiter-flexible` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/animir/node-rate-limiter-flexible/releases)
- [Commits](animir/node-rate-limiter-flexible@v11.1.0...v11.2.0)

Updates `redis` from 5.12.1 to 6.1.0
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@5.12.1...redis@6.1.0)

Updates `stripe` from 22.1.1 to 22.3.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.1.1...v22.3.0)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `@nestjs/cli` from 11.0.21 to 11.0.23
- [Release notes](https://github.com/nestjs/nest-cli/releases)
- [Commits](nestjs/nest-cli@11.0.21...11.0.23)

Updates `commander` from 14.0.3 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.3...v15.0.0)

Updates `concurrently` from 9.2.1 to 10.0.3
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3)

Updates `jest` from 29.7.0 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

Updates `@types/jest` from 29.5.14 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@nestjs/testing"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@nestjs/websockets"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.220.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.220.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@sentry/node"
  dependency-version: 10.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@stellar/stellar-sdk"
  dependency-version: 16.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: better-sqlite3
  dependency-version: 12.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: bullmq
  dependency-version: 5.79.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: graphql-tag
  dependency-version: 2.12.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: helmet
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ioredis
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: knex
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: puppeteer
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: rate-limiter-flexible
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: redis
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: stripe
  dependency-version: 22.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@nestjs/cli"
  dependency-version: 11.0.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: concurrently
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@types/jest"
  dependency-version: 30.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants