Repository navigation
build(deps): bump @opentelemetry/resources from 2.12.0 to 3.0.0 - #154
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/opentelemetry/resources-3.0.0
branch
from
October 31, 2026 02:03
8a7bb31 to
b636e33
Compare
Bumps [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) from 2.12.0 to 3.0.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.12.0...v3.0.0) --- updated-dependencies: - dependency-name: "@opentelemetry/resources" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/opentelemetry/resources-3.0.0
branch
from
November 2, 2026 18:28
b636e33 to
4e0de39
Compare
semics-tech
added a commit
that referenced
this pull request
Nov 3, 2026
) Supersedes [#153](#153) (sdk-logs 0.223 -> 3.0.0) and [#154](#154) (resources 2.12 -> 3.0.0). **Both can be closed once this merges.** I haven't touched the .github bumps #122-#126. ## Why #153/#154 failed - **Dependency audit:** not caused by OpenTelemetry. Both dependabot branches are based on an older `main`, so their lockfiles still pin `node-forge@1.4.0` (6 high advisories, patched in 1.4.1). `main` already has `node-forge ^1.4.2`, so basing on current `main` clears it. No audit config change needed. - **Demo compose stack (#153 only):** `seed` exited 1 on the stale base. I couldn't pull the seed log out of the CI output, so this is unconfirmed. Please check that this PR's Compose smoke run is green; if it isn't, the seed log is the thing to read. ## Changes - `@opentelemetry/resources` ^3.0.0, `@opentelemetry/sdk-logs` ^3.0.0. The exporters stay on ^0.300.0, which depend on sdk-logs/sdk-trace 3.0.0. - `sdk-trace-base` and `sdk-trace-node` have **no 3.x release**. They're deprecated for `@opentelemetry/sdk-trace`, which 3.0.0 and the 0.300 trace exporter use. Tracing therefore moves to `@opentelemetry/sdk-trace` ^3.0.0 plus `@opentelemetry/context-async-hooks` ^3.0.0. This leaves a single copy of each OTel package in the lockfile. - `@opentelemetry/api` stays at ^1.10.0, which the 3.x peer range (`>=1.10 <1.11`) needs. `api-logs` stays at 0.223.0, the latest published; sdk-logs 3 no longer depends on it. - `packages/server/src/tracing.ts` migration: - `NodeTracerProvider` becomes `TracerProvider`. - `provider.register()` no longer exists, so the global provider and an `AsyncLocalStorageContextManager` are set explicitly, and `stopTracing` disables them again. - `BatchSpanProcessor` and `SimpleSpanProcessor` now take `{ exporter }`. - The two existing tracing tests are updated to the new imports. - New `packages/server/test/tracing.test.ts` needs no database. It checks that the provider is registered, the active span survives an `await`, sample ratio 0 drops spans, and `stopTracing` resets to no-op. - `LoggerProvider` and `BatchLogRecordProcessor` in `audit-export.ts` needed no source change. ## Node No bump needed: `engines`, the Dockerfile (`node:24-bookworm-slim`) and CI (`NODE_VERSION: 24`) are already above the 22.15 floor. ## Verification (local, host Node 24.21) - `pnpm lint`: 0 errors. The one warning is in `Admin.tsx`. - `pnpm typecheck`: clean. - `vitest --project server test/tracing.test.ts`: 5/5 pass. - **Not run locally:** the Postgres-backed server tests, including the two updated tracing tests. The sandbox can't bind ports and containers have no network, so I couldn't run them in Docker. CI's Unit tests job is the check for those. ## Risk for the 10 Nov post Low. The change is confined to the opt-in tracing and audit-export paths, and both are off by default. Runtime behaviour is unchanged, apart from the explicit context-manager registration needed on 3.x. The main residual risk is OTLP export against a real collector, which no test here covers. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- _Draft opened by Oli's repos agent._ Co-authored-by: Agent Harness <agent@SEMICSs-Mac-mini.local> Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/opentelemetry/resources-3.0.0
branch
November 3, 2026 07:12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps @opentelemetry/resources from 2.12.0 to 3.0.0.
Release notes
Sourced from @opentelemetry/resources's releases.
... (truncated)
Changelog
Sourced from @opentelemetry/resources's changelog.
... (truncated)
Commits
12a5817chore: prepare next release (#7213)2a97587docs: 3.x migration doc edits (#7216)ebefa76chore(deps): update dependency eslint to v10.13.0 (#7129)83b6922chore(deps): update dependency superagent to v10.4.1 (#7184)68e9e6efix(otlp-exporter-base): pick fetch mode from the document origin, not locati...7d2455ebuild: lint for unused dependencies with knip (#7200)5e65e0efix(core): no longer drop an attribute value that is an object that has `un...2fbb404chore(deps): dedupe nx to 23.3.0 (#7205)c971f52docs(changelog): trim unreleased entries (#7203)2516215feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...