bump otel dependencies

[n1ru4l]

Background

• https://github.com/graphql-hive/console/security/dependabot/683
• https://github.com/graphql-hive/console/security/dependabot/684
• https://github.com/graphql-hive/console/security/dependabot/688
• https://github.com/graphql-hive/console/security/dependabot/686
• https://github.com/graphql-hive/console/security/dependabot/685

Description

Bumps a bunch of packages (hive gateway) to reduce the amount of duped dependencies and address vulnerabilities

Checklist

• Input validation
• Output encoding
• Authentication management
• Session management
• Access control
• Cryptographic practices
• Error handling and logging
• Data protection
• Communication security
• System configuration
• Database security
• File management
• Memory management
• Testing

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@graphql-hive/cli	0.59.2-alpha-20260512074934-3c5c60c43eb09d0a0ce81271c70194347a4050bb	npm ↗︎ unpkg ↗︎
hive	11.1.0-alpha-20260512074934-3c5c60c43eb09d0a0ce81271c70194347a4050bb	npm ↗︎ unpkg ↗︎

[gemini-code-assist]

Code Review

This pull request updates dependencies across several packages, including @graphql-hive/logger, @graphql-hive/plugin-opentelemetry, and various OpenTelemetry libraries. Feedback indicates that required changesets are missing for both the service and SDK scopes, which is necessary for proper versioning and release notes according to the repository style guide.

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Targets: build

Platforms: linux/arm64

Image Tag: 3c5c60c43eb09d0a0ce81271c70194347a4050bb

[n1ru4l]

the old version was causing bunch of duped packages.

[n1ru4l]

Bumped so we do not have multiple versions of it in the project at the same time.

[n1ru4l]

this one was unused

[n1ru4l]

This one we could not address via dependency updates.

devDependencies:
@graphql-hive/gateway 2.7.2
└─┬ @graphql-mesh/plugin-jit 0.2.36
  └─┬ graphql-jit 0.8.7
    └─┬ fast-json-stringify 5.16.1
      └── fast-uri 2.4.0

@hive/server /Users/laurinquast/Projects/graphql-hive-3/packages/services/server (PRIVATE)

devDependencies:
@envelop/graphql-jit 8.0.3
└─┬ graphql-jit 0.8.6
  └─┬ fast-json-stringify 5.16.1
    └── fast-uri 2.4.0

[dotansimha]

lgtm. just worth mentioning in Pr title/descipriton that you also upgrade hive-gw?