chore(deps): bump the opentelemetry-packages group across 1 directory with 5 updates by dependabot[bot] · Pull Request #20582 · mozilla/fxa

dependabot · 2026-05-12T17:36:32Z

Bumps the opentelemetry-packages group with 5 updates in the / directory:

Package	From	To
@opentelemetry/auto-instrumentations-node	`0.58.1`	`0.73.0`
@opentelemetry/sdk-trace-base	`2.0.1`	`2.7.0`
@opentelemetry/sdk-trace-node	`2.0.1`	`2.7.0`
@opentelemetry/sdk-trace-web	`2.0.1`	`2.7.0`
@opentelemetry/semantic-conventions	`1.34.0`	`1.40.0`

Updates @opentelemetry/auto-instrumentations-node from 0.58.1 to 0.73.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

instrumentation-user-interaction: v0.61.0

0.61.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

instrumentation-long-task: v0.61.0

0.61.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

instrumentation-document-load: v0.62.0

0.62.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

instrumentation-winston: v0.61.0

0.61.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/winston-transport bumped from ^0.26.0 to ^0.27.0

instrumentation-router: v0.61.0

0.61.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

instrumentation-restify: v0.62.0

0.62.0 (2026-05-06)

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.73.0 (2026-04-17)

Features

deps: update deps matching '@opentelemetry/*' (#3479) (8891261)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-bunyan bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-connect bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-cucumber bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-dataloader bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-dns bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-express bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-fs bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-graphql bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-hapi bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-ioredis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.23.0 to ^0.24.0

@opentelemetry/instrumentation-knex bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-koa bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-memcached bumped from ^0.57.0 to ^0.58.0

@opentelemetry/instrumentation-mongodb bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mongoose bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-net bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-openai bumped from ^0.12.0 to ^0.13.0

@opentelemetry/instrumentation-oracledb bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-pg bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-pino bumped from ^0.60.0 to ^0.61.0

@opentelemetry/instrumentation-redis bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-restify bumped from ^0.59.0 to ^0.60.0

@opentelemetry/instrumentation-router bumped from ^0.58.0 to ^0.59.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.27.0 to ^0.28.0

@opentelemetry/instrumentation-socket.io bumped from ^0.61.0 to ^0.62.0

@opentelemetry/instrumentation-tedious bumped from ^0.33.0 to ^0.34.0

@opentelemetry/instrumentation-undici bumped from ^0.24.0 to ^0.25.0

@opentelemetry/instrumentation-winston bumped from ^0.58.0 to ^0.59.0

... (truncated)

Commits

bd017c8 chore: release main (#3451)
8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
36a030c chore: switch to short license header (#3476)
ed97091 chore: release main (#3415)
c8df394 feat(deps): update deps matching '@opentelemetry/*' (#3450)
ac26e9a feat(auto-instrumentations-node, instrumentation-fastify)!: remove instrument...
39f08c3 chore: release main (#3410)
7f4b776 feat(deps): update deps matching "@opentelemetry/*" (#3411)
630937d chore: release main (#3398)
0b33a11 chore: release main (#3365)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/auto-instrumentations-node since your current version.

Updates @opentelemetry/sdk-trace-base from 2.0.1 to 2.7.0

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

v2.6.0

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

🐛 Bug Fixes

... (truncated)

Commits

a0476ee chore: prepare next release (#6603)
6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
840f3d4 chore: re-arrange misplaced changelog entries (#6604)
2da8d39 feat(configuration): refactoring config loader to print warning message for b...
401af13 fix(deps): update dependency protobufjs to v8 (#6602)
36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
394eeb0 chore: update changelog script (#6586)
36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/sdk-trace-base since your current version.

Updates @opentelemetry/sdk-trace-node from 2.0.1 to 2.7.0

Release notes

Sourced from @opentelemetry/sdk-trace-node's releases.

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

v2.6.0

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-trace-node's changelog.

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

🐛 Bug Fixes

... (truncated)

Commits

a0476ee chore: prepare next release (#6603)
6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
840f3d4 chore: re-arrange misplaced changelog entries (#6604)
2da8d39 feat(configuration): refactoring config loader to print warning message for b...
401af13 fix(deps): update dependency protobufjs to v8 (#6602)
36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
394eeb0 chore: update changelog script (#6586)
36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/sdk-trace-node since your current version.

Updates @opentelemetry/sdk-trace-web from 2.0.1 to 2.7.0

Release notes

Sourced from @opentelemetry/sdk-trace-web's releases.

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

v2.6.1

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

v2.6.0

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-trace-web's changelog.

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

2.6.1

🐛 Bug Fixes

fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @rlj1202

fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @overbalance

fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @overbalance

fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @Renegade2345

🏠 Internal

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(sdk-trace-base): avoid Object.entries in Span.setAttributes #6514 @daniellockyer

perf(sdk-trace-base): optimize Span.{addEvent,addLink} performance #6516 @daniellockyer

test(bundlers): broaden bundler test coverage and assert known protobuf dynamic-require failures #6482 @overbalance

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

🐛 Bug Fixes

... (truncated)

Commits

a0476ee chore: prepare next release (#6603)
6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
840f3d4 chore: re-arrange misplaced changelog entries (#6604)
2da8d39 feat(configuration): refactoring config loader to print warning message for b...
401af13 fix(deps): update dependency protobufjs to v8 (#6602)
36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
394eeb0 chore: update changelog script (#6586)
36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/sdk-trace-web since your current version.

Updates @opentelemetry/semantic-conventions from 1.34.0 to 1.40.0

Release notes

Sourced from @opentelemetry/semantic-conventions's releases.

semconv/v1.40.0

1.40.0

🚀 Features

feat: update semantic conventions to v1.40.0 #6438
- Semantic Conventions v1.40.0: changelog | latest docs
- @opentelemetry/semantic-conventions (stable) changes: 2 added exports
- @opentelemetry/semantic-conventions/incubating (unstable) changes: 11 newly deprecated exports, 56 added exports

Stable changes in v1.40.0

ATTR_SERVICE_INSTANCE_ID // service.instance.id
ATTR_SERVICE_NAMESPACE   // service.namespace

Unstable changes in v1.40.0

METRIC_RPC_CLIENT_REQUEST_SIZE     // rpc.client.request.size: Removed, no replacement at this time.
METRIC_RPC_CLIENT_RESPONSE_SIZE    // rpc.client.response.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_REQUEST_SIZE     // rpc.server.request.size: Removed, no replacement at this time.
METRIC_RPC_SERVER_RESPONSE_SIZE    // rpc.server.response.size: Removed, no replacement at this time.
METRIC_SYSTEM_MEMORY_SHARED        // system.memory.shared: Replaced by `system.memory.linux.shared`.
EVENT_RPC_MESSAGE                  // rpc.message: Deprecated, no replacement at this time.
ATTR_ERROR_MESSAGE                 // error.message: Use domain-specific error message attribute. For example, use `feature_flag.error.message` for feature flag errors.
ATTR_RPC_MESSAGE_COMPRESSED_SIZE   // rpc.message.compressed_size: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_ID                // rpc.message.id: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_TYPE              // rpc.message.type: Deprecated, no replacement at this time.
ATTR_RPC_MESSAGE_UNCOMPRESSED_SIZE // rpc.message.uncompressed_size: Deprecated, no replacement at this time.

METRIC_JVM_FILE_DESCRIPTOR_LIMIT                 // jvm.file_descriptor.limit
METRIC_K8S_SERVICE_ENDPOINT_COUNT                // k8s.service.endpoint.count
</tr></table>

... (truncated)

Commits

661cd84 chore: update all license headers to SPDX short format (#6447)
ed6bd6d chore: prepare next release (#6448)
636d1d0 feat(semantic-conventions): update semantic conventions to v1.40.0 (#6438)
1bffafa fix(instrumentation-http): guard against double-instrumentation if loaded wit...
f7cd6ab refactor(api): refactor to avoid circular deps, add dpdm to lint step (#6441)
bffd65f fix(deps): update dependency google-protobuf to v4 (#6411)
8479a91 chore(deps): update dependency @types/jquery to v3.5.34 (#6443)
99d6e15 fix(otlp-exporter-base): handle response error event (#6412)
200cf9a fix(api): Update DiagLogger to use original console methods (#6395)
b1beebb chore(deps): update github/codeql-action digest to 89a39a4 (#6436)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/semantic-conventions since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@opentelemetry/sdk-trace-base	[< 2, > 1.7.0]
@opentelemetry/sdk-trace-node	[>= 1.17.a, < 1.18]

… with 5 updates Bumps the opentelemetry-packages group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.58.1` | `0.73.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.0.1` | `2.7.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.0.1` | `2.7.0` | | [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `2.0.1` | `2.7.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.34.0` | `1.40.0` | Updates `@opentelemetry/auto-instrumentations-node` from 0.58.1 to 0.73.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.73.0/packages/auto-instrumentations-node) Updates `@opentelemetry/sdk-trace-base` from 2.0.1 to 2.7.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.1...v2.7.0) Updates `@opentelemetry/sdk-trace-node` from 2.0.1 to 2.7.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.1...v2.7.0) Updates `@opentelemetry/sdk-trace-web` from 2.0.1 to 2.7.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.1...v2.7.0) Updates `@opentelemetry/semantic-conventions` from 1.34.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.34.0...semconv/v1.40.0) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry-packages - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry-packages - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry-packages - dependency-name: "@opentelemetry/sdk-trace-web" dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry-packages - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.40.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: opentelemetry-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file maintenance labels May 12, 2026

dependabot Bot requested a review from a team as a code owner May 12, 2026 17:36

dependabot Bot added dependencies Pull requests that update a dependency file maintenance labels May 12, 2026

dependabot Bot changed the title ~~chore(deps): bump the opentelemetry-packages group with 5 updates~~ chore(deps): bump the opentelemetry-packages group across 1 directory with 5 updates May 12, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/opentelemetry-packages-89b610feb8 branch 2 times, most recently from 0f6fa1c to 121c7c6 Compare May 13, 2026 01:16

dependabot Bot force-pushed the dependabot/npm_and_yarn/opentelemetry-packages-89b610feb8 branch from 121c7c6 to 55d66ad Compare May 13, 2026 06:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the opentelemetry-packages group across 1 directory with 5 updates#20582

chore(deps): bump the opentelemetry-packages group across 1 directory with 5 updates#20582
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/opentelemetry-packages-89b610feb8

dependabot Bot commented on behalf of github May 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

instrumentation-user-interaction: v0.61.0

0.61.0 (2026-05-06)

Features

instrumentation-long-task: v0.61.0

0.61.0 (2026-05-06)

Features

instrumentation-document-load: v0.62.0

0.62.0 (2026-05-06)

Features

instrumentation-winston: v0.61.0

0.61.0 (2026-05-06)

Features

Dependencies

instrumentation-router: v0.61.0

0.61.0 (2026-05-06)

Features

instrumentation-restify: v0.62.0

0.62.0 (2026-05-06)

0.73.0 (2026-04-17)

Features

Dependencies

v2.7.0

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

v2.6.0

2.6.0

💥 Breaking Changes

🚀 Features

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v2.7.0

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

🏠 Internal

v2.6.0

2.6.0

💥 Breaking Changes

🚀 Features

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

🏠 Internal

2.6.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v2.7.0

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

dependabot Bot commented on behalf of github May 12, 2026 •

edited

Loading