chore(deps): bump the production-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #54 · andreibesleaga/kaiban-distributed

dependabot · 2026-07-13T11:56:59Z

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
@a2a-js/sdk	`0.3.13`	`0.3.14`
@langchain/openai	`0.5.18`	`1.5.5`
@opentelemetry/auto-instrumentations-node	`0.77.0`	`0.78.0`
@opentelemetry/exporter-metrics-otlp-http	`0.219.0`	`0.220.0`
@opentelemetry/exporter-trace-otlp-http	`0.219.0`	`0.220.0`
@opentelemetry/sdk-metrics	`2.8.0`	`2.9.0`
@opentelemetry/sdk-node	`0.219.0`	`0.220.0`
bullmq	`5.79.0`	`5.80.2`
helmet	`8.2.0`	`8.3.0`

Updates @a2a-js/sdk from 0.3.13 to 0.3.14

Release notes

Sourced from @a2a-js/sdk's releases.

v0.3.14

0.3.14 (2026-07-09)

Bug Fixes

support GET for resubscribe route (#569) (8dd43d1)

Changelog

Sourced from @a2a-js/sdk's changelog.

0.3.14 (2026-07-09)

Bug Fixes

support GET for resubscribe route (#569) (8dd43d1)

Commits

cfeed0d chore(main): release 0.3.14 (#570)
8dd43d1 fix: support GET for resubscribe route (#569)
b4fca66 docs: update README to reference the v1.0 beta release (#557)
55cd081 chore(deps): bump esbuild and tsx in /src/samples (#515)
03fd218 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /src/samples (#477)
2c3a912 chore(deps): bump @grpc/grpc-js from 1.14.3 to 1.14.4 in /src/samples (#512)
06fc41a chore(deps): bump protobufjs from 7.5.4 to 7.5.8 in /src/samples (#470)
f7a6c7e chore(deps-dev): bump protobufjs from 7.5.4 to 7.5.8 (#469)
12df0bc chore(deps-dev): bump fast-xml-builder from 1.1.5 to 1.2.0 in /src/samples (#...
a7e4d5f chore(deps-dev): bump fast-xml-parser from 5.5.7 to 5.7.1 in /src/samples (#421)
Additional commits viewable in compare view

Updates @langchain/openai from 0.5.18 to 1.5.5

Release notes

Sourced from @langchain/openai's releases.

@langchain/openai@1.5.5

Patch Changes

#11175 a9f123a Thanks @colifran! - fix(openai): filter out content blocks the chat completions api rejects as input

#11177 09e7f6d Thanks @colifran! - fix(openai): drop tool_call content blocks from chat completions input

@langchain/openai@1.5.4

Patch Changes

#11169 988ca7d Thanks @colifran! - fix(openai): emit output_text for assistant content in responses input

@langchain/openai@1.5.3

Patch Changes

#11100 3205b35 Thanks @colifran! - fix(langchain, openai): decouple strict tools from strict structured output response

@langchain/openai@1.5.2

Patch Changes

#11045 05936ab Thanks @jackjin1997! - fix(openai): omit empty id and content on reasoning items in Responses API input

Reasoning blocks reassembled from streaming chunks (e.g. via streamEvents) never carry an id, since OpenAI's streaming protocol only includes it in non-streaming responses. When such a message was replayed as Responses API input on the next turn, the reasoning item was emitted with id: "", which OpenAI rejects with 400 Invalid 'input[n].id': ''. The id field is now omitted when absent.

A second error surfaced immediately after that fix: the same converter set a populated content array on the reasoning input item, which the Responses API also rejects (400 Invalid 'input[n].content': array too long. Expected an array with maximum length 0). Reasoning input items only carry summary, so content is no longer forwarded. Thanks to @csrujanreddy for catching the second issue and verifying both fixes against the live API.

#11065 798cb70 Thanks @rxits! - fix(openai): route standard url file blocks to native input_file in Responses API

#11090 80c790b Thanks @nikhilpakhloo! - fix(openai): stream built-in tool progress events

@langchain/openai@1.5.1

Patch Changes

#11001 80b43ec Thanks @Herrtian! - Wrap Responses API stream iteration errors with existing OpenAI client error handling.

@langchain/openai@1.5.0

Minor Changes

#10924 2e28115 Thanks @christian-bromann! - feat(openai): add native streamEvents event converters

@langchain/openai@1.4.7

Patch Changes

#10918 3999fab Thanks @christian-bromann! - fix(openai): stream custom tool calls through Responses API chunks

#10791 fce9ab4 Thanks @Genmin! - fix(openai): preserve top-level Responses API ids on AI messages

@langchain/openai@1.4.6

Patch Changes

... (truncated)

Commits

f51f338 chore: version packages (#11176)
09e7f6d fix(openai): drop tool_call content blocks from chat completions input (#11...
a9f123a fix(openai): filter out content blocks the chat completions api rejects as in...
cc39f56 chore: version packages (#11172)
82bef01 fix(core): coerce string v1 AIMessage content to text blocks (#11171)
8a7c5f8 chore: version packages (#11170)
988ca7d fix(openai): emit output_text for assistant content in responses input (#11...
e233f41 chore: version packages (#11168)
4c7a06e fix(langchain): malformed tool input schemas are unrecoverable (#11167)
1a1fe3c chore(deps): bump the aws group across 1 directory with 7 updates (#11134)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @langchain/openai since your current version.

Updates @opentelemetry/auto-instrumentations-node from 0.77.0 to 0.78.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.78.0 (2026-07-03)

Features

deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-bunyan bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-connect bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-cucumber bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-dataloader bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dns bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-express bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-fs bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-graphql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-hapi bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.2.0 to ^0.3.0

@opentelemetry/instrumentation-ioredis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.28.0 to ^0.29.0

@opentelemetry/instrumentation-knex bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-koa bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-memcached bumped from ^0.62.0 to ^0.63.0

@opentelemetry/instrumentation-mongodb bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-mongoose bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-net bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-openai bumped from ^0.17.0 to ^0.18.0

@opentelemetry/instrumentation-oracledb bumped from ^0.44.0 to ^0.45.0

@opentelemetry/instrumentation-pg bumped from ^0.71.0 to ^0.72.0

@opentelemetry/instrumentation-pino bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-redis bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-restify bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-router bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.32.0 to ^0.33.0

@opentelemetry/instrumentation-socket.io bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-tedious bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-undici bumped from ^0.29.0 to ^0.30.0

... (truncated)

Commits

8d7daea chore: release main (#3568)
6dfb532 feat(deps): update deps matching '@opentelemetry/*' (#3593)
See full diff in compare view

Updates @opentelemetry/exporter-metrics-otlp-http from 0.219.0 to 0.220.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-http's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Internal

chore(sdk-node): migrate to use the new sdk-trace package #6828 @trentm

The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @mwear

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.219.0 to 0.220.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Internal

chore(sdk-node): migrate to use the new sdk-trace package #6828 @trentm

The node re-export of @opentelemetry/sdk-trace-node and tracing re-export of @opentelemetry/sdk-trace-base have been deprecated. (Historically the @opentelemetry/sdk-node package has re-exported from a number of core packages. It is now recommended that users directly import from those other packages.)

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

fix(instrumentation,instrumentation-http): fix codecov coverage under-reporting by merging coverage across CJS/ESM test runs #6867 @mwear

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-metrics from 2.8.0 to 2.9.0

Release notes

Sourced from @opentelemetry/sdk-metrics's releases.

v2.9.0

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

Changelog

Sourced from @opentelemetry/sdk-metrics's changelog.

2.9.0

💥 Breaking Changes

docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @psx95

Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.

feat(sdk-trace): implement span processor metrics #6504 @anuraaga

feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @trentm

"sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".

The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817

The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504

feat(sdk-trace): add AlwaysRecordSampler #6188 @majanjua-amzn

🐛 Bug Fixes

fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @pichlermarc

🏠 Internal

perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @legendecas

chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @trentm

perf(sdk-metrics): optionally capture active context for sync instruments #6848 @legendecas

Commits

40d67b7 chore: prepare next release (#6869)
b1c196d Merge commit from fork
d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
991434c chore(deps): update dependency @bufbuild/buf to v1.71.0 (#6863)
69303d0 chore(deps): update all patch versions (#6862)
6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.219.0 to 0.220.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @trentm

(user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).

interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property

interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions

(user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836

refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @trentm

Responsibility for handling declarative config "nullBehavior" and "defaultBehavior" belongs in the "create" handling, currently in the "sdk-node" package.

docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.

The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

feat(configuration): bump config schema to v1.1.0; rename without_scope_info → scope_info_enabled and without_target_info/development → target_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labels → resource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @MikeGoldsmith

feat(sdk-node): wire up id_generator from declarative config #6782 @MikeGoldsmith

feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @MikeGoldsmith

feat(propagator-env-carrier): empty name normalization #6827 @pellared

feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @pellared

🐛 Bug Fixes

fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @anneheartrecord

fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @MikeGoldsmith

fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @trentm

fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @MikeGoldsmith

fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @MikeGoldsmith

fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785 @trentm

📚 Documentation

docs(configuration): link the configuration README to the cross-SDK declarative config language support status doc #6809 @MikeGoldsmith

🏠 Inter...
Description has been truncated

…y with 10 updates Bumps the production-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@a2a-js/sdk](https://github.com/a2aproject/a2a-js) | `0.3.13` | `0.3.14` | | [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `0.5.18` | `1.5.5` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.77.0` | `0.78.0` | | [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.220.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.220.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.8.0` | `2.9.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.220.0` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.79.0` | `5.80.2` | | [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` | Updates `@a2a-js/sdk` from 0.3.13 to 0.3.14 - [Release notes](https://github.com/a2aproject/a2a-js/releases) - [Changelog](https://github.com/a2aproject/a2a-js/blob/main/CHANGELOG.md) - [Commits](a2aproject/a2a-js@v0.3.13...v0.3.14) Updates `@langchain/openai` from 0.5.18 to 1.5.5 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai==0.5.18...@langchain/openai@1.5.5) Updates `@opentelemetry/auto-instrumentations-node` from 0.77.0 to 0.78.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.78.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.219.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.219.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0) Updates `@opentelemetry/sdk-metrics` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.8.0...v2.9.0) Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.220.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0) Updates `@opentelemetry/sdk-trace-node` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.8.0...v2.9.0) Updates `bullmq` from 5.79.0 to 5.80.2 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.79.0...v5.80.2) Updates `helmet` from 8.2.0 to 8.3.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.2.0...v8.3.0) --- updated-dependencies: - dependency-name: "@a2a-js/sdk" dependency-version: 0.3.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@langchain/openai" dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-http" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.220.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: bullmq dependency-version: 5.80.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: helmet dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

andreibesleaga · 2026-07-16T06:26:35Z

Superseded by #57, which applies these upgrades on top of current main with lockfiles regenerated under npm 10 (matching CI's Node 22 bundled npm — the npm 10/11 lockfile resolution mismatch was why npm ci failed here). All gates verified green on #57: lint/typecheck/madge/api-extractor, 1155 tests at 100% coverage, board build + 148 tests, audit clean (includes the jaeger-propagator fix).

dependabot · 2026-07-16T06:26:38Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

…grade deps: consolidated dependency upgrades (supersedes #52, #53, #54, #56)

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 13, 2026

andreibesleaga mentioned this pull request Jul 16, 2026

deps: consolidated dependency upgrades (supersedes #52, #53, #54, #56) #57

Merged

andreibesleaga closed this Jul 16, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-bb770e98a7 branch July 16, 2026 06:26

andreibesleaga added a commit that referenced this pull request Jul 16, 2026

Merge pull request #57 from andreibesleaga/chore/deps-consolidated-up…

d93b62f

…grade deps: consolidated dependency upgrades (supersedes #52, #53, #54, #56)

Navigation Menu

chore(deps): bump the production-dependencies group across 1 directory with 10 updates - #54

chore(deps): bump the production-dependencies group across 1 directory with 10 updates#54
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-bb770e98a7

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

andreibesleaga commented Jul 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026

v0.3.14

0.3.14 (2026-07-09)

Bug Fixes

0.3.14 (2026-07-09)

Bug Fixes

@​langchain/openai@​1.5.5

Patch Changes

@​langchain/openai@​1.5.4

Patch Changes

@​langchain/openai@​1.5.3

Patch Changes

@​langchain/openai@​1.5.2

Patch Changes

@​langchain/openai@​1.5.1

Patch Changes

@​langchain/openai@​1.5.0

Minor Changes

@​langchain/openai@​1.4.7

Patch Changes

@​langchain/openai@​1.4.6

Patch Changes

auto-instrumentations-node: v0.78.0

0.78.0 (2026-07-03)

Features

Dependencies

0.78.0 (2026-07-03)

Features

Dependencies

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

v2.9.0

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.9.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.220.0

0.220.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Inter... Description has been truncated

Uh oh!

andreibesleaga commented Jul 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@langchain/openai@1`.5.5

`@langchain/openai@1`.5.4

`@langchain/openai@1`.5.3

`@langchain/openai@1`.5.2

`@langchain/openai@1`.5.1

`@langchain/openai@1`.5.0

`@langchain/openai@1`.4.7

`@langchain/openai@1`.4.6

🏠 Inter...
Description has been truncated