Upgrade all @opentelemetry/* dependencies to latest 2.x versions and resolve legacy vulnerabilities

[nnoce14]

Task

Upgrade all @opentelemetry/* dependencies to the latest 2.x versions. The following are currently pinned to legacy versions:

"@opentelemetry/api": "1.9.0",
"@opentelemetry/instrumentation-dataloader": "0.17.0",
"@opentelemetry/instrumentation-graphql": "0.48.0",
"@opentelemetry/instrumentation-http": "0.52.1",
"@opentelemetry/instrumentation-mongoose": "0.47.0",
"@opentelemetry/sdk-logs": "0.57.2",
"@opentelemetry/sdk-metrics": "1.30.1",
"@opentelemetry/sdk-node": "0.57.2",
"@opentelemetry/sdk-trace-node": "1.30.1",
"@opentelemetry/semantic-conventions": "1.28.0"

Requirements

• Upgrade all above packages (and related package versions) to the latest stable 2.x versions.
• Refactor/adjust implementation code to align with OpenTelemetry 2.x APIs and breaking changes where necessary.
• Ensure all instrumentation plugins are compatible with the new versions.
• Run pnpm run verify and all security scans (pnpm run snyk) after upgrading.
• Fix any test failures, lint errors, or Snyk issues introduced by the upgrade.
• Close out any recently reported vulnerabilities related to legacy OpenTelemetry libraries.

Motivation

• Align with the latest OpenTelemetry standards and API improvements
• Resolve known vulnerabilities in legacy OpenTelemetry dependencies
• Reduce tech debt from pinned and deprecated versions

Acceptance Criteria

• All @opentelemetry/* dependencies are upgraded to latest 2.x compatible versions
• Code compiles and all tests pass
• No critical Snyk or security issues related to OpenTelemetry
• Documentation and workflow scripts are updated if required