Skip to content

Bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-grpc and @opentelemetry/sdk-node#110

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-238713379b
Open

Bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-grpc and @opentelemetry/sdk-node#110
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-238713379b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps protobufjs to 7.6.4 and updates ancestor dependencies protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-grpc and @opentelemetry/sdk-node. These dependencies need to be updated together.

Updates protobufjs from 7.5.4 to 7.6.4

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

  • Avoid name collisions in generated code (#2311) (78a9576)
  • Preserve null conversion behavior for fieldless messages (#2312) (df91652)

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

  • Backport consistency and correctness fixes (#2294) (a92f72e)

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

protobufjs: v7.6.0

7.6.0 (2026-05-18)

Features

protobufjs: v7.5.9

7.5.9 (2026-05-17)

Bug Fixes

  • Backport bundler-safe optional module lookups (#2254) (0853a62)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.6.4 (2026-06-12)

Bug Fixes

7.6.3 (2026-06-09)

Bug Fixes

  • Avoid name collisions in generated code (#2311) (78a9576)
  • Preserve null conversion behavior for fieldless messages (#2312) (df91652)

7.6.2 (2026-05-30)

Bug Fixes

  • Backport consistency and correctness fixes (#2294) (a92f72e)

7.6.1 (2026-05-22)

Bug Fixes

7.6.0 (2026-05-18)

Features

7.5.9 (2026-05-17)

Bug Fixes

  • Backport bundler-safe optional module lookups (#2254) (0853a62)

7.5.8 (2026-05-12)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.


Updates @opentelemetry/auto-instrumentations-node from 0.47.1 to 0.77.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.77.0

0.77.0 (2026-06-11)

Features

  • add @​opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)
  • deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.77.0 (2026-06-11)

Features

  • add @​opentelemetry/instrumentation-host-metrics and integrate into auto-instrumentations-node (#3492) (16bee31)
  • deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.34.0 to ^0.35.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-express bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.1.0 to ^0.2.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.27.0 to ^0.28.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.71.0 to ^0.72.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-net bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.16.0 to ^0.17.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.43.0 to ^0.44.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-router bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.37.0 to ^0.38.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/auto-instrumentations-node since your current version.


Updates @opentelemetry/exporter-trace-otlp-grpc from 0.52.1 to 0.219.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-grpc's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

  • fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
    • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
  • fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
  • feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
  • fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

🐛 Bug Fixes

  • fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
  • fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
  • fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
  • fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
  • fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
  • fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
  • fix(browser-detector): user agent resource attribute always #6754 @​david-luna
  • fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
  • fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
  • fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

  • docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

  • refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

... (truncated)

Commits
  • 13a035b chore: prepare next release (#6756)
  • 4b13587 Merge commit from fork
  • 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
  • 555fca6 Update renovate.json to use matchManagers (#6141)
  • b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
  • da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
  • 002267b chore: complete the move to the smaller SPDX license header (#6791)
  • 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
  • 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
  • bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/exporter-trace-otlp-grpc since your current version.


Updates @opentelemetry/sdk-node from 0.52.1 to 0.219.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

  • fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
    • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
  • fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
  • feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
  • fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

🐛 Bug Fixes

  • fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
  • fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
  • fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
  • fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
  • fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
  • fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
  • fix(browser-detector): user agent resource attribute always #6754 @​david-luna
  • fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
  • fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
  • fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

  • docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

  • refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

... (truncated)

Commits
  • 13a035b chore: prepare next release (#6756)
  • 4b13587 Merge commit from fork
  • 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
  • 555fca6 Update renovate.json to use matchManagers (#6141)
  • b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
  • da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
  • 002267b chore: complete the move to the smaller SPDX license header (#6791)
  • 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
  • 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
  • bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/sdk-node since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…metry/exporter-trace-otlp-grpc and @opentelemetry/sdk-node

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.6.4 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) and [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js). These dependencies need to be updated together.


Updates `protobufjs` from 7.5.4 to 7.6.4
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.4/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.4)

Updates `@opentelemetry/auto-instrumentations-node` from 0.47.1 to 0.77.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.77.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.52.1 to 0.219.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.52.1...experimental/v0.219.0)

Updates `@opentelemetry/sdk-node` from 0.52.1 to 0.219.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.52.1...experimental/v0.219.0)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 7.6.4
  dependency-type: indirect
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.77.0
  dependency-type: direct:production
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.219.0
  dependency-type: direct:production
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.219.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor labels Jun 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants