chore(deps): bump the npm-minor-patch group across 1 directory with 26 updates by dependabot[bot] · Pull Request #39 · fikrilal/backend-core-kit

dependabot · 2026-03-02T13:23:42Z

Bumps the npm-minor-patch group with 25 updates in the / directory:

Package	From	To
@fastify/swagger	`9.6.1`	`9.7.0`
@fastify/swagger-ui	`5.2.4`	`5.2.5`
@nestjs/common	`11.1.11`	`11.1.14`
@nestjs/core	`11.1.11`	`11.1.14`
@nestjs/platform-fastify	`11.1.13`	`11.1.14`
@opentelemetry/auto-instrumentations-node	`0.67.3`	`0.70.1`
@opentelemetry/exporter-trace-otlp-http	`0.209.0`	`0.212.0`
@opentelemetry/resources	`2.3.0`	`2.5.1`
@opentelemetry/sdk-node	`0.209.0`	`0.212.0`
@opentelemetry/semantic-conventions	`1.38.0`	`1.40.0`
@prisma/adapter-pg	`7.2.0`	`7.4.2`
@prisma/client	`7.4.0`	`7.4.2`
bullmq	`5.66.4`	`5.70.1`
class-validator	`0.14.3`	`0.15.1`
firebase-admin	`13.6.0`	`13.7.0`
nestjs-pino	`4.5.0`	`4.6.0`
pino	`10.1.1`	`10.3.1`
qs	`6.14.2`	`6.15.0`
resend	`6.7.0`	`6.9.3`
@nestjs/cli	`11.0.14`	`11.0.16`
dependency-cruiser	`17.3.6`	`17.3.8`
dotenv	`17.2.3`	`17.3.1`
prettier	`3.7.4`	`3.8.1`
prisma	`7.4.0`	`7.4.2`
typescript-eslint	`8.52.0`	`8.56.1`

Updates @fastify/swagger from 9.6.1 to 9.7.0

Release notes

Sourced from @fastify/swagger's releases.

v9.7.0

What's Changed

chore: faster checks by @ilteoood in fastify/fastify-swagger#905

chore(deps-dev): bump @types/node from 24.10.4 to 25.0.3 by @dependabot[bot] in fastify/fastify-swagger#907

chore: remove tests-checker workflow by @Tony133 in fastify/fastify-swagger#908

fix(openapi): always set requestBody.required to true when schema.body exists by @bas0N in fastify/fastify-swagger#903

chore: ignore local AI assistant files by @mcollina in fastify/fastify-swagger#909

fix(openapi): keep required query flag for params by @mcollina in fastify/fastify-swagger#910

New Contributors

@ilteoood made their first contribution in fastify/fastify-swagger#905

@bas0N made their first contribution in fastify/fastify-swagger#903

Full Changelog: fastify/fastify-swagger@v9.6.1...v9.7.0

Commits

4e44d70 Bumped v9.7.0
ab6c5df fix(openapi): keep required query flag for params (#910)
99b9b43 chore: ignore local AI assistant files (#909)
a65d96a fix(openapi): always set requestBody.required to true when schema.body exists...
d35da58 chore: remove tests-checker workflow (#908)
efcb074 chore(deps-dev): bump @types/node from 24.10.4 to 25.0.3 (#907)
746069d chore: faster checks (#905)
See full diff in compare view

Updates @fastify/swagger-ui from 5.2.4 to 5.2.5

Release notes

Sourced from @fastify/swagger-ui's releases.

v5.2.5

What's Changed

fix: include oauth2-redirect.js in npm package distribution by @martinbark in fastify/fastify-swagger-ui#252

New Contributors

@martinbark made their first contribution in fastify/fastify-swagger-ui#252

Full Changelog: fastify/fastify-swagger-ui@v5.2.4...v5.2.5

Commits

fa38d45 Bumped v5.2.5
5735941 fix: include oauth2-redirect.js in npm package distribution (#252)
See full diff in compare view

Updates @nestjs/common from 11.1.11 to 11.1.14

Release notes

Sourced from @nestjs/common's releases.

v11.1.14 (2026-02-17)

Bug fixes

platform-fastify

#16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)

common

#16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

common

#16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

Julien Dufresne (@JulienDuf)

Kamil Mysliwiec (@kamilmysliwiec)

Mykhailo Skrypsky (@mixator)

Spencer Kaiser (@SpencerKaiser)

조수민 (@suuuuuuminnnnnn)

v11.1.13 (2026-02-03)

Bug fixes

common

#16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices

#16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)

#16262 Feat/microservices configurable max buffer size (@jobnow)

common

#16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify

#16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])

platform-express

#16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)

Mykhailo Skrypsky (@mixator)

Neo (@chojs23)

Praveen Somasundaram (@som14062005)

Ricardo Gomes (@jobnow)

조수민 (@suuuuuuminnnnnn)

v11.1.12 (2026-01-15)

Bug fixes

common

... (truncated)

Commits

5d31df7 chore(release): publish v11.1.14 release
829d326 Merge pull request #16314 from SpencerKaiser/bugfix/cors-types
5058600 fix(common): change requestOrigin type
91212b2 fix: return type error
804d27b fix: invalid context when no stack trace is provided
8d1c16c chore: update readme
e3a958a chore(release): publish v11.1.13 release
d88856c test(common): add unit tests for class serializer interceptor
a1f6162 Merge pull request #16202 from som14062005/fix/issue-16195
8222634 refactor: move built-in types to module-level constant
Additional commits viewable in compare view

Updates @nestjs/core from 11.1.11 to 11.1.14

Release notes

Sourced from @nestjs/core's releases.

v11.1.14 (2026-02-17)

Bug fixes

platform-fastify

#16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)

common

#16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

common

#16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

Julien Dufresne (@JulienDuf)

Kamil Mysliwiec (@kamilmysliwiec)

Mykhailo Skrypsky (@mixator)

Spencer Kaiser (@SpencerKaiser)

조수민 (@suuuuuuminnnnnn)

v11.1.13 (2026-02-03)

Bug fixes

common

#16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices

#16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)

#16262 Feat/microservices configurable max buffer size (@jobnow)

common

#16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify

#16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])

platform-express

#16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)

Mykhailo Skrypsky (@mixator)

Neo (@chojs23)

Praveen Somasundaram (@som14062005)

Ricardo Gomes (@jobnow)

조수민 (@suuuuuuminnnnnn)

v11.1.12 (2026-01-15)

Bug fixes

common

... (truncated)

Commits

5d31df7 chore(release): publish v11.1.14 release
8d1c16c chore: update readme
e3a958a chore(release): publish v11.1.13 release
db9494a perf(core): use set instead of array for module registry lookup
909b504 test(core): add unit tests for discovery service
96932ad chore(release): publish v11.1.12 release
4fdeb0b style: address lint issues
e5616c2 feat: apply instance decorator to all enhancers
See full diff in compare view

Updates @nestjs/platform-fastify from 11.1.13 to 11.1.14

Release notes

Sourced from @nestjs/platform-fastify's releases.

v11.1.14 (2026-02-17)

Bug fixes

platform-fastify

#16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)

common

#16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

common

#16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

Julien Dufresne (@JulienDuf)

Kamil Mysliwiec (@kamilmysliwiec)

Mykhailo Skrypsky (@mixator)

Spencer Kaiser (@SpencerKaiser)

조수민 (@suuuuuuminnnnnn)

Commits

5d31df7 chore(release): publish v11.1.14 release
d74e9a8 fix(fastify): fastify middleware bypass cve
8d1c16c chore: update readme
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.67.3 to 0.70.1

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.70.1

0.70.1 (2026-02-25)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-cucumber bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-graphql bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-socket.io bumped from ^0.58.0 to ^0.59.0

auto-instrumentations-node: v0.70.0

0.70.0 (2026-02-16)

Features

deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0

@opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.70.1 (2026-02-25)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-cucumber bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-graphql bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-socket.io bumped from ^0.58.0 to ^0.59.0

0.70.0 (2026-02-16)

Features

deps: update deps matching "@opentelemetry/*" (#3383) (d3ac785)

Bug Fixes

auto-instrumentation-node: resource detector from env should be the last detector (#3363) (97d9ef0)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-bunyan bumped from ^0.56.0 to ^0.57.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.56.0 to ^0.57.0

@opentelemetry/instrumentation-connect bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-cucumber bumped from ^0.26.0 to ^0.27.0

@opentelemetry/instrumentation-dataloader bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-dns bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-express bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-fastify bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-fs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-graphql bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-hapi bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-ioredis bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-knex bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-koa bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.55.0 to ^0.56.0

@opentelemetry/instrumentation-memcached bumped from ^0.54.0 to ^0.55.0

@opentelemetry/instrumentation-mongodb bumped from ^0.64.0 to ^0.65.0

... (truncated)

Commits

630937d chore: release main (#3398)
0b33a11 chore: release main (#3365)
d3ac785 chore(deps): update deps matching "@opentelemetry/*" (#3383)
97d9ef0 fix(auto-instrumentation-node): resource detector from env should be the last...
7a5f3c0 chore: release main (#3342)
a56bbdc feat(deps): update deps matching '@opentelemetry/*' (#3353)
c84212c chore: release main (#3315)
2954943 feat(deps): update deps matching '@opentelemetry/*' (#3340)
925a150 feat(deps): update deps matching '@opentelemetry/*' (#3332)
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.209.0 to 0.212.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

perf(otlp-transformer): optimize toAnyValue performance #6287 @AbhiPrasad

experimental/v0.211.0

0.211.0

💥 Breaking Changes

fix(otlp-exporter-base)!: remove xhr transport #6317 @cjihrig

(user-facing) The deprecated XHR-based transport has been removed and replaced with fetch(). This change affects users who relied on XmlHttpRequest instead of fetch() for sending headers with OTLP exports. To maintain compatibility on browsers without a fetch() implementation, include a fetch() polyfill.

chore(api-logs)!: remove ProxyLoggerProvider export #6322 @david-luna

🚀 Features

feat(sdk-logs): export event name from ConsoleLogRecordExporter #6310 @aicest

🐛 Bug Fixes

fix(sdk-logs): allow AnyValue attributes for logs and handle circular references #6210 @david-luna

based on #5765 from @alec2435

fix(browser-detector): use window feature detection to avoid false positives in Node.js 21+ and Bun #6271 @fiyinfoluwa001 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.3.0 to 2.5.1

Release notes

Sourced from @opentelemetry/resources's releases.

v2.5.1

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

v2.5.0

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

v2.4.0

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

Changelog

Sourced from @opentelemetry/resources's changelog.

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

2.4.0

🐛 Bug Fixes

fix(sdk-metrics): improve PeriodicExportingMetricReader() constructor input validation #6286 @cjihrig

fix(core): Avoid using DOM types for otperformance export #6278 @samchungy

🏠 Internal

chore(browser): fix CODEOWNERS paths for browser-related packages

refactor(sdk-metrics): remove Promise.allSettled() ponyfill #6277 @cjihrig

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.209.0 to 0.212.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

perf(otlp-transformer): optimize toAnyValue performance #6287 @AbhiPrasad

experimental/v0.211.0

0.211.0

💥 Breaking Changes

fix(otlp-exporter-base)!: remove xhr transport #6317 @cjihrig

(user-facing) The deprecated XHR-based transport has been removed and replaced with fetch(). This change affects users who relied on XmlHttpRequest instead of fetch() for sending headers with OTLP exports. To maintain compatibility on browsers without a fetch() implementation, include a fetch() polyfill.

chore(api-logs)!: remove ProxyLoggerProvider export #6322 @david-luna

🚀 Features

feat(sdk-logs): export event name from ConsoleLogRecordExporter #6310 @aicest

🐛 Bug Fixes

fix(sdk-logs): allow AnyValue attributes for logs and handle circular references #6210 @david-luna

based on #5765 from @alec2435

fix(browser-detector): use window feature detection to avoid false positives in Node.js 21+ and Bun #6271 @fiyinfoluwa001 @overbalance

... (truncated)

Commits

ad92be4 chore: prepare next release (#6402)
3e68499 feat(configuration): add prometheus exporter support (#6400)
b743747 fix(configuration): remove default propagator initialization (#6399)
48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
90d1afa ci: allow different release bumps for groups (#6397)
c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
a78d112 fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security] (#6366)
fcafab5 chore: fix lint (#6388)
a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
Additional commits viewable in compare view

Updates @opentelemetry/semantic-conventions from 1.38.0 to 1.40.0

Release notes

Sourced from @opentelemetry/semantic-conventions's releases.

semconv/v1.40.0

1.40.0

🚀 Features

feat: update semantic conventions to v1.40.0 #6438
- Semantic Conventions v1.40.0: changelog | latest docs
- @opentelemetry/semantic-conventions (stable) changes: 2 added exports
- @opentelemetry/semantic-conventions/incubating (unstable) changes: 11 newly deprecated exports, 56 added exports

Stable changes in v1.40.0

ATTR_SERVICE_INSTANCE_ID // service.instance.id
ATTR_SERVICE_NAMESPACE   // service.namespace

Unstable changes in v1.40.0

METRIC_RPC_CLIENT_REQUEST_SIZE     // rpc.client.request.size: Removed, no replacement at this time.
METRIC_RPC_CLIENT_RESPONSE_SIZE    // rpc.client.response.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_REQUEST_SIZE     // rpc.server.request.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_RESPONSE_SIZE    // rpc.server.response.size: Removed, no replacement at this time.
METRIC_SYSTEM_MEMORY_SHARED        // system.memory.shared: Replaced by `system.memory.linux.shared`.
EVENT_RPC_MESSAGE                  // rpc.message: Deprecated, no replacement at this time.
ATTR_ERROR_MESSAGE                 // error.message: Use domain-specific error message attribute. For example, use `feature_flag.error.message` for feature flag errors.
ATTR_RPC_MESSAGE_COMPRESSED_SIZE   // rpc.message.compressed_size: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_ID                // rpc.message.id: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_TYPE              // rpc.message.type: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_UNCOMPRESSED_SIZE // rpc.message.uncompressed_size: Deprecated, no replacement at this time.

METRIC_JVM_FILE_DESCRIPTOR_LIMIT                 // jvm.file_descriptor.limit
METRIC_K8S_SERVICE_ENDPOINT_COUNT                // k8s.service.endpoint.count
</...
Description has been truncated

…6 updates Bumps the npm-minor-patch group with 25 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.6.1` | `9.7.0` | | [@fastify/swagger-ui](https://github.com/fastify/fastify-swagger-ui) | `5.2.4` | `5.2.5` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.11` | `11.1.14` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.11` | `11.1.14` | | [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `11.1.13` | `11.1.14` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.67.3` | `0.70.1` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.209.0` | `0.212.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.3.0` | `2.5.1` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.209.0` | `0.212.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.40.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.2.0` | `7.4.2` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.4.0` | `7.4.2` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.66.4` | `5.70.1` | | [class-validator](https://github.com/typestack/class-validator) | `0.14.3` | `0.15.1` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `13.6.0` | `13.7.0` | | [nestjs-pino](https://github.com/iamolegga/nestjs-pino) | `4.5.0` | `4.6.0` | | [pino](https://github.com/pinojs/pino) | `10.1.1` | `10.3.1` | | [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.15.0` | | [resend](https://github.com/resend/resend-node) | `6.7.0` | `6.9.3` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.14` | `11.0.16` | | [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `17.3.6` | `17.3.8` | | [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.3.1` | | [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.1` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.4.0` | `7.4.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.52.0` | `8.56.1` | Updates `@fastify/swagger` from 9.6.1 to 9.7.0 - [Release notes](https://github.com/fastify/fastify-swagger/releases) - [Commits](fastify/fastify-swagger@v9.6.1...v9.7.0) Updates `@fastify/swagger-ui` from 5.2.4 to 5.2.5 - [Release notes](https://github.com/fastify/fastify-swagger-ui/releases) - [Commits](fastify/fastify-swagger-ui@v5.2.4...v5.2.5) Updates `@nestjs/common` from 11.1.11 to 11.1.14 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.14/packages/common) Updates `@nestjs/core` from 11.1.11 to 11.1.14 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.14/packages/core) Updates `@nestjs/platform-fastify` from 11.1.13 to 11.1.14 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.14/packages/platform-fastify) Updates `@opentelemetry/auto-instrumentations-node` from 0.67.3 to 0.70.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.70.1/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.209.0 to 0.212.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.209.0...experimental/v0.212.0) Updates `@opentelemetry/resources` from 2.3.0 to 2.5.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.3.0...v2.5.1) Updates `@opentelemetry/sdk-node` from 0.209.0 to 0.212.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.209.0...experimental/v0.212.0) Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.40.0) Updates `@prisma/adapter-pg` from 7.2.0 to 7.4.2 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.4.2/packages/adapter-pg) Updates `@prisma/client` from 7.4.0 to 7.4.2 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.4.2/packages/client) Updates `bullmq` from 5.66.4 to 5.70.1 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.66.4...v5.70.1) Updates `class-validator` from 0.14.3 to 0.15.1 - [Release notes](https://github.com/typestack/class-validator/releases) - [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md) - [Commits](typestack/class-validator@v0.14.3...v0.15.1) Updates `firebase-admin` from 13.6.0 to 13.7.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-admin-node@v13.6.0...v13.7.0) Updates `ioredis` from 5.9.1 to 5.9.3 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.9.1...v5.9.3) Updates `nestjs-pino` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/iamolegga/nestjs-pino/releases) - [Commits](iamolegga/nestjs-pino@4.5.0...4.6.0) Updates `pino` from 10.1.1 to 10.3.1 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v10.1.1...v10.3.1) Updates `qs` from 6.14.2 to 6.15.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.2...v6.15.0) Updates `resend` from 6.7.0 to 6.9.3 - [Release notes](https://github.com/resend/resend-node/releases) - [Commits](resend/resend-node@v6.7.0...v6.9.3) Updates `@nestjs/cli` from 11.0.14 to 11.0.16 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Commits](nestjs/nest-cli@11.0.14...11.0.16) Updates `dependency-cruiser` from 17.3.6 to 17.3.8 - [Release notes](https://github.com/sverweij/dependency-cruiser/releases) - [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md) - [Commits](sverweij/dependency-cruiser@v17.3.6...v17.3.8) Updates `dotenv` from 17.2.3 to 17.3.1 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.2.3...v17.3.1) Updates `prettier` from 3.7.4 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.7.4...3.8.1) Updates `prisma` from 7.4.0 to 7.4.2 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.4.2/packages/cli) Updates `typescript-eslint` from 8.52.0 to 8.56.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@fastify/swagger" dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@fastify/swagger-ui" dependency-version: 5.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/common" dependency-version: 11.1.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/core" dependency-version: 11.1.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/platform-fastify" dependency-version: 11.1.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.70.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.212.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@opentelemetry/resources" dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.212.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@prisma/adapter-pg" dependency-version: 7.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@prisma/client" dependency-version: 7.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: bullmq dependency-version: 5.70.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: class-validator dependency-version: 0.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: firebase-admin dependency-version: 13.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: ioredis dependency-version: 5.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: nestjs-pino dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: pino dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: qs dependency-version: 6.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: resend dependency-version: 6.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@nestjs/cli" dependency-version: 11.0.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: dependency-cruiser dependency-version: 17.3.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: dotenv dependency-version: 17.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: prisma dependency-version: 7.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: typescript-eslint dependency-version: 8.56.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-07T06:35:57Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 2, 2026

dependabot Bot closed this Mar 7, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-patch-a451f6a5d4 branch March 7, 2026 06:35

Navigation Menu

chore(deps): bump the npm-minor-patch group across 1 directory with 26 updates - #39

chore(deps): bump the npm-minor-patch group across 1 directory with 26 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-a451f6a5d4

dependabot Bot commented on behalf of github Mar 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Mar 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.7.0

What's Changed

New Contributors

v5.2.5

What's Changed

New Contributors

v11.1.14 (2026-02-17)

Bug fixes

Enhancements

Committers: 5

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

v11.1.14 (2026-02-17)

Bug fixes

Enhancements

Committers: 5

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

v11.1.14 (2026-02-17)

Bug fixes

Enhancements

Committers: 5

auto-instrumentations-node: v0.70.1

0.70.1 (2026-02-25)

Dependencies

auto-instrumentations-node: v0.70.0

0.70.0 (2026-02-16)

Features

Bug Fixes

Dependencies

0.70.1 (2026-02-25)

Dependencies

0.70.0 (2026-02-16)

Features

Bug Fixes

Dependencies

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.211.0

0.211.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v2.5.1

2.5.1

🐛 Bug Fixes

🏠 Internal

v2.5.0

2.5.0

🐛 Bug Fixes

🏠 Internal

v2.4.0

2.4.0

🐛 Bug Fixes

🏠 Internal

2.5.1

🐛 Bug Fixes

🏠 Internal

2.5.0

🐛 Bug Fixes

🏠 Internal

2.4.0

🐛 Bug Fixes

dependabot Bot commented on behalf of github Mar 2, 2026 •

edited

Loading