chore(deps)(deps): bump the backend-minor-patch group in /backend with 3 updates by dependabot[bot] · Pull Request #1523 · nova-launch01/nova-launch

dependabot · 2026-07-04T20:09:08Z

Bumps the backend-minor-patch group in /backend with 3 updates: @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-http and @opentelemetry/sdk-node.

Updates @opentelemetry/auto-instrumentations-node from 0.77.0 to 0.78.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-undici bumped from ^0.29.0 to ^0.30.0

... (truncated)

Commits

8d7daea chore: release main (#3568)
6dfb532 feat(deps): update deps matching '@opentelemetry/*' (#3593)
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.219.0 to 0.220.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Internal

chore(sdk-node): migrate to use the new sdk-trace package #6828 @trentm

The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @mwear

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.219.0 to 0.220.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Internal

chore(sdk-node): migrate to use the new sdk-trace package #6828 @trentm

The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @mwear

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend-minor-patch group in /backend with 3 updates: [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) and [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js). Updates `@opentelemetry/auto-instrumentations-node` from 0.77.0 to 0.78.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.78.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.219.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0) Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-04T20:09:09Z

Assignees

The following users could not be added as assignees: Just-Bamford. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the backend Backend API work label Jul 4, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps)(deps): bump the backend-minor-patch group in /backend with 3 updates#1523

chore(deps)(deps): bump the backend-minor-patch group in /backend with 3 updates#1523
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/main/backend-minor-patch-25ed3dfdc7

dependabot Bot commented on behalf of github Jul 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

Dependencies

0.78.0 (2026-07-03)

Features

Dependencies

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

Uh oh!

dependabot Bot commented on behalf of github Jul 4, 2026

Assignees

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 4, 2026 •

edited

Loading