chore(deps): bump @opentelemetry/core, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-logs-otlp-http, @opentelemetry/exporter-metrics-otlp-http, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/instrumentation-http, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-node by dependabot[bot] · Pull Request #69 · microsoft/github-advisory-mcp

dependabot · 2026-06-17T15:58:37Z

Bumps @opentelemetry/core to 2.8.0 and updates ancestor dependencies @opentelemetry/core, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-logs-otlp-http, @opentelemetry/exporter-metrics-otlp-http, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/instrumentation-http, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-node. These dependencies need to be updated together.

Updates @opentelemetry/core from 2.5.0 to 2.8.0

Release notes

Sourced from @opentelemetry/core's releases.

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

... (truncated)

Changelog

Sourced from @opentelemetry/core's changelog.

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

2.6.1

🐛 Bug Fixes

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.69.0 to 0.77.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.77.0

0.77.0 (2026-06-11)

Features

add @opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0

@opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.77.0 (2026-06-11)

Features

add @opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0

@opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0

@opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0

@opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-tedious bumped from ^0.37.0 to ^0.38.0

... (truncated)

Commits

4e52a90 chore: release main (#3524)
bd569b5 feat(deps): update deps matching '@opentelemetry/*' (#3567)
16bee31 feat: add @opentelemetry/instrumentation-host-metrics and integrate into auto...
15ef750 chore: release main (#3508)
e26a90a feat(deps): update deps matching '@opentelemetry/*' (#3523)
See full diff in compare view

Updates @opentelemetry/exporter-logs-otlp-http from 0.211.0 to 0.219.0

Release notes

Sourced from @opentelemetry/exporter-logs-otlp-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-http from 0.211.0 to 0.219.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.211.0 to 0.219.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-http from 0.211.0 to 0.219.0

Release notes

Sourced from @opentelemetry/instrumentation-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.5.0 to 2.8.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

...
Description has been truncated

…ations-node, @opentelemetry/exporter-logs-otlp-http, @opentelemetry/exporter-metrics-otlp-http, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/instrumentation-http, @opentelemetry/resources, @opentelemetry/sdk-logs, @opentelemetry/sdk-metrics, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-node Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.8.0 and updates ancestor dependencies [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js), [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) and [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js). These dependencies need to be updated together. Updates `@opentelemetry/core` from 2.5.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.8.0) Updates `@opentelemetry/auto-instrumentations-node` from 0.69.0 to 0.77.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.77.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-logs-otlp-http` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/instrumentation-http` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/resources` from 2.5.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.8.0) Updates `@opentelemetry/sdk-logs` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/sdk-metrics` from 2.5.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.8.0) Updates `@opentelemetry/sdk-node` from 0.211.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.211.0...experimental/v0.219.0) Updates `@opentelemetry/sdk-trace-base` from 2.5.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.8.0) Updates `@opentelemetry/sdk-trace-node` from 2.5.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.8.0) --- updated-dependencies: - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: indirect - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.77.0 dependency-type: direct:production - dependency-name: "@opentelemetry/exporter-logs-otlp-http" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/exporter-metrics-otlp-http" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/resources" dependency-version: 2.8.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.8.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.219.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.8.0 dependency-type: direct:production - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.8.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-17T15:59:07Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 4 package(s) with unknown licenses.
⚠️ 3 packages with OpenSSF Scorecard issues.

View full job summary

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026

dependabot Bot requested a review from maxgolov as a code owner June 17, 2026 15:58

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

dependabot Bot commented on behalf of github Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 17, 2026

v2.8.0

2.8.0

🚀 Features

🐛 Bug Fixes

v2.7.1

2.7.1

🐛 Bug Fixes

🏠 Internal

v2.7.0

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.8.0

🚀 Features

🐛 Bug Fixes

2.7.1

🐛 Bug Fixes

🏠 Internal

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

auto-instrumentations-node: v0.77.0

0.77.0 (2026-06-11)

Features

Dependencies

0.77.0 (2026-06-11)

Features

Dependencies

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

v2.8.0

2.8.0