Skip to content

deps(backend): bump the minor-and-patch group across 1 directory with 24 updates#35

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-2f987ea22e
Open

deps(backend): bump the minor-and-patch group across 1 directory with 24 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-2f987ea22e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the minor-and-patch group with 23 updates in the /backend directory:

Package From To
@aws-sdk/client-s3 3.957.0 3.1048.0
@aws-sdk/s3-request-presigner 3.957.0 3.1048.0
@opentelemetry/api 1.7.0 1.9.1
@opentelemetry/auto-instrumentations-node 0.40.3 0.76.0
@opentelemetry/exporter-trace-otlp-http 0.48.0 0.218.0
@opentelemetry/sdk-node 0.48.0 0.218.0
@opentelemetry/semantic-conventions 1.38.0 1.41.1
bullmq 5.66.2 5.76.10
multer 2.0.2 2.1.1
@types/multer 1.4.13 2.1.0
pdfkit 0.17.2 0.18.0
sanitize-html 2.17.0 2.17.4
@types/sanitize-html 2.16.0 2.16.1
@types/pdfkit 0.17.4 0.17.6
@typescript-eslint/eslint-plugin 8.50.1 8.59.3
@typescript-eslint/parser 8.50.1 8.59.3
@vitest/coverage-v8 4.0.16 4.1.6
eslint-plugin-prettier 5.5.4 5.5.5
prettier 3.7.4 3.8.3
supertest 7.1.4 7.2.2
@types/supertest 2.0.16 7.2.0
tsx 4.21.0 4.22.1
vitest 4.0.16 4.1.6

Updates @aws-sdk/client-s3 from 3.957.0 to 3.1048.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1048.0

3.1048.0(2026-05-15)

Chores
New Features
  • clients: update client endpoints as of 2026-05-15 (4aa76bd0)
  • client-mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests (6c8a84d4)
  • client-partnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. (d68a75c4)
  • client-cloudwatch-logs: Updating the max limit for start query api parameter. (931876e1)

For list of updated packages, view updated-packages.md in assets-3.1048.0.zip

v3.1047.0

3.1047.0(2026-05-14)

Chores
New Features
  • clients: update client endpoints as of 2026-05-14 (3505575d)
  • client-glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. (e2b076ee)
  • client-database-migration-service: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. (32d372e7)
  • client-mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. (27c07049)
  • client-bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. (7e479fde)
  • client-cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes (ee96afaa)
  • client-datazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export (383f4ea2)
  • client-qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. (0d6d7ec3)
  • client-grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. (1184c5e5)

For list of updated packages, view updated-packages.md in assets-3.1047.0.zip

v3.1046.0

3.1046.0(2026-05-14)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1048.0 (2026-05-15)

Note: Version bump only for package @​aws-sdk/client-s3

3.1047.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1046.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1044.0 (2026-05-06)

Features

  • client-s3: Validate outpost access point resource name (bee88a5)

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.957.0 to 3.1048.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1048.0

3.1048.0(2026-05-15)

Chores
New Features
  • clients: update client endpoints as of 2026-05-15 (4aa76bd0)
  • client-mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests (6c8a84d4)
  • client-partnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. (d68a75c4)
  • client-cloudwatch-logs: Updating the max limit for start query api parameter. (931876e1)

For list of updated packages, view updated-packages.md in assets-3.1048.0.zip

v3.1047.0

3.1047.0(2026-05-14)

Chores
New Features
  • clients: update client endpoints as of 2026-05-14 (3505575d)
  • client-glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. (e2b076ee)
  • client-database-migration-service: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. (32d372e7)
  • client-mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. (27c07049)
  • client-bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. (7e479fde)
  • client-cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes (ee96afaa)
  • client-datazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export (383f4ea2)
  • client-qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. (0d6d7ec3)
  • client-grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. (1184c5e5)

For list of updated packages, view updated-packages.md in assets-3.1047.0.zip

v3.1046.0

3.1046.0(2026-05-14)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1048.0 (2026-05-15)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1047.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1046.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1044.0 (2026-05-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1042.0 (2026-05-04)

... (truncated)

Commits

Updates @opentelemetry/api from 1.7.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

api/v1.9.0

1.9.0

🚀 (Enhancement)

  • feat(metrics): added synchronous gauge #4528 @​clintonb
  • feat(api): allow adding span links after span creation #4536 @​seemk
    • This change is non-breaking for end-users, but breaking for Trace SDK implmentations in accordance with the specification as new features need to be implemented.
  • feat: support node 22 #4666 @​dyladan

API v1.8.0

🚀 (Enhancement)

  • feat(api): add SugaredTracer for functions not defined in the spec #3317 @​secustor

🐛 (Bug Fix)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear

1.9.0

🚀 (Enhancement)

  • feat(instrumentation-grpc): set net.peer.name and net.peer.port on client spans #3430
  • feat(exporter-trace-otlp-proto): Add protobuf otlp trace exporter support for browser #3208 @​pkanal

🐛 (Bug Fix)

  • fix(sdk-metrics): use default Resource to comply with semantic conventions #3411 @​pichlermarc
    • Metrics exported by the SDK now contain the following resource attributes by default:
      • service.name
      • telemetry.sdk.name
      • telemetry.sdk.language
      • telemetry.sdk.version
  • fix(sdk-metrics): use Date.now() for instrument recording timestamps #3514 @​MisterSquishy
  • fix(sdk-trace): make spans resilient to clock drift #3434 @​dyladan
  • fix(selenium-tests): updated webpack version for selenium test issue #3456 @​SaumyaBhushan
  • fix(sdk-metrics): collect metrics when periodic exporting metric reader flushes #3517 @​legendecas
  • fix(sdk-metrics): fix duplicated registration of metrics for collectors #3488 @​legendecas
  • fix(core): fix precision loss in numberToHrtime #3480 @​legendecas

🏠 (Internal)

1.8.0

  • @opentelemetry/sdk-metrics has been promoted to stable
  • @opentelemetry/api-metrics has been merged into @opentelemetry/api and deprecated

💥 Breaking Change

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @opentelemetry/auto-instrumentations-node from 0.40.3 to 0.76.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.76.0

0.76.0 (2026-05-13)

Features

  • deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.33.0 to ^0.34.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.34.0 to ^0.35.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-express bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-net bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.15.0 to ^0.16.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.42.0 to ^0.43.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-router bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.27.0 to ^0.28.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.76.0 (2026-05-13)

Features

  • deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.33.0 to ^0.34.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.34.0 to ^0.35.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-express bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.26.0 to ^0.27.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.60.0 to ^0.61.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-net bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.15.0 to ^0.16.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.42.0 to ^0.43.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.62.0 to ^0.63.0
      • @​opentelemetry/instrumentation-router bumped from ^0.61.0 to ^0.62.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.30.0 to ^0.31.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.27.0 to ^0.28.0
      • @​opentelemetry/instrumentation-winston bumped from ^0.61.0 to ^0.62.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/auto-instrumentations-node since your current version.


Updates @opentelemetry/exporter-trace-otlp-http from 0.48.0 to 0.218.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.218.0

0.218.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

  • refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @​david-luna
  • refactor(sdk-logs): use Logger.enabled() within Logger.emit() implementation #6680 @​david-luna

experimental/v0.217.0

0.217.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @​MikeGoldsmith
  • feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @​trentm
    • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
    • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
    • An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

  • fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @​trentm
  • fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @​trentm
  • fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @​trentm
  • fix(configuration): improve handling of enums in generated types #6659 @​trentm
  • fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @​trentm
  • fix(sampler-jaeger-remote): add missing axios dep #6656 @​trentm
  • fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @​homanp

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira

... (truncated)

Commits
  • 06ad0ea chore: prepare next release (#6703)
  • 38ca257 feat(otlp-transformer): replace protobufjs metrics serialization with custom ...
  • 013c600 chore: prepare next release (#6699)
  • b7a0c63 feat(semantic-conventions): update semantic conventions to v1.41.1 (#6695)
  • 774143b chore(renovate): add minimumReleaseAge to config (#6697)
  • e0dafe0 fix(otlp-exporter-base): remove brackets from IPv6 hostname in HTTP transport...
  • f804c93 chore(deps): update github/codeql-action digest to 68bde55 (#6682)
  • 95e48e7 refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions (...
  • 907b627 feat(sdk-node): allow startNodeSDK() without an arg (#6688)
  • 0d15261 docs: Add SIG meeting info and welcoming language (#6689)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/exporter-trace-otlp-http since your current version.


Updates @opentelemetry/sdk-node from 0.48.0 to 0.218.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.218.0

0.218.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

  • refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @​david-luna
  • refactor(sdk-logs): use Logger.enabled() within Logger.emit() implementation #6680 @​david-luna

experimental/v0.217.0

0.217.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @​MikeGoldsmith
  • feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @​trentm
    • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
    • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
    • An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

  • fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @​trentm
  • fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @​trentm
  • fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @​trentm
  • fix(configuration): improve handling of enums in generated types #6659 @​trentm
  • fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @​trentm
  • fix(sampler-jaeger-remote): add missing axios dep #6656 @​trentm
  • fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @​homanp

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira

... (truncated)

Commits
  • 06ad0ea chore: prepare next release (#6703)
  • 38ca257 feat(otlp-transformer): replace protobufjs metrics serialization with custom ...
  • 013c600 chore: prepare next release (#6699)
  • b7a0c63 feat(semantic-conventions): update semantic conventions to v1.41.1 (#6695)
  • 774143b chore(renovate): add minimumReleaseAge to config (

@dependabot
deps(backend): bump the minor-and-patch group across 1 directory with…
52edb0a 
… 24 updates

Bumps the minor-and-patch group with 23 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.957.0` | `3.1048.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.957.0` | `3.1048.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.7.0` | `1.9.1` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.40.3` | `0.76.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.218.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.48.0` | `0.218.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.41.1` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.66.2` | `5.76.10` |
| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.1.1` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `1.4.13` | `2.1.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.18.0` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.0` | `2.17.4` |
| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.0` | `2.16.1` |
| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.17.4` | `0.17.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.50.1` | `8.59.3` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.50.1` | `8.59.3` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.16` | `4.1.6` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.3` |
| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |
| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `2.0.16` | `7.2.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.16` | `4.1.6` |



Updates `@aws-sdk/client-s3` from 3.957.0 to 3.1048.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1048.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.957.0 to 3.1048.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1048.0/packages/s3-request-presigner)

Updates `@opentelemetry/api` from 1.7.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.7.0...v1.9.1)

Updates `@opentelemetry/auto-instrumentations-node` from 0.40.3 to 0.76.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.76.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.48.0 to 0.218.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.218.0)

Updates `@opentelemetry/sdk-node` from 0.48.0 to 0.218.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.48.0...experimental/v0.218.0)

Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.41.1)

Updates `bullmq` from 5.66.2 to 5.76.10
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.66.2...v5.76.10)

Updates `ioredis` from 5.8.2 to 5.10.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.8.2...v5.10.1)

Updates `multer` from 2.0.2 to 2.1.1
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.0.2...v2.1.1)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `pdfkit` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.17.2...v0.18.0)

Updates `sanitize-html` from 2.17.0 to 2.17.4
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `@types/multer` from 1.4.13 to 2.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `@types/pdfkit` from 0.17.4 to 0.17.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pdfkit)

Updates `@types/sanitize-html` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `@typescript-eslint/eslint-plugin` from 8.50.1 to 8.59.3
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.1 to 8.59.3
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/parser)

Updates `@vitest/coverage-v8` from 4.0.16 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5)

Updates `prettier` from 3.7.4 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.3)

Updates `supertest` from 7.1.4 to 7.2.2
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.1.4...v7.2.2)

Updates `@types/supertest` from 2.0.16 to 7.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest)

Updates `tsx` from 4.21.0 to 4.22.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.22.1)

Updates `vitest` from 4.0.16 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1048.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1048.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.218.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.218.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bullmq
  dependency-version: 5.76.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ioredis
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: multer
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: pdfkit
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/multer"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: "@types/pdfkit"
  dependency-version: 0.17.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: supertest
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/supertest"
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.22.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 18, 2026

Labels

The following labels could not be found: backend, dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants