fix: bumped otel core packages

- bumped @opentelemetry/core from 2.7.1 to 2.8.0
- bumped @opentelemetry/sdk-trace-base from 2.3.0 to 2.8.0
- bumped @opentelemetry/resources from 2.3.0 to 2.8.0

resolved - GHSA-8988-4f7v-96qf

Author: abhilash-sivan

package-lock.json

@@ -60,13 +60,13 @@
     "@instana/instrumentation-confluent-kafka-javascript": "1.0.0",
     "@opentelemetry/api": ">=1.3.0 <1.10.0",
     "@opentelemetry/context-async-hooks": "1.25.0",
-    "@opentelemetry/core": "2.7.1",
+    "@opentelemetry/core": "2.8.0",
     "@opentelemetry/instrumentation-fs": "0.37.0",
     "@opentelemetry/instrumentation-oracledb": "0.43.0",
     "@opentelemetry/instrumentation-restify": "0.63.0",
     "@opentelemetry/instrumentation-socket.io": "0.65.0",
     "@opentelemetry/instrumentation-tedious": "0.37.0",
-    "@opentelemetry/sdk-trace-base": "2.3.0",
+    "@opentelemetry/sdk-trace-base": "2.8.0",
     "cls-bluebird": "^2.1.0",
     "import-in-the-middle": "2.0.5",
     "lru-cache": "^10.1.0",

packages/core/package.json

@@ -58,7 +58,7 @@
   "dependencies": {
     "@instana/serverless": "6.2.0",
     "@opentelemetry/api": "1.9.1",
-    "@opentelemetry/core": "2.7.1"
+    "@opentelemetry/core": "2.8.0"
   },
   "devDependencies": {
     "@opentelemetry/auto-instrumentations-node": "^0.67.3",

packages/opentelemetry-exporter/package.json

@@ -58,9 +58,9 @@
     "@opentelemetry/auto-instrumentations-node": "^0.67.3",
     "@opentelemetry/exporter-trace-otlp-http": "^0.209.0",
     "@opentelemetry/propagator-instana": "^0.5.0",
-    "@opentelemetry/resources": "^2.3.0",
+    "@opentelemetry/resources": "^2.8.0",
     "@opentelemetry/sdk-node": "^0.209.0",
-    "@opentelemetry/sdk-trace-base": "^2.3.0",
+    "@opentelemetry/sdk-trace-base": "^2.8.0",
     "@opentelemetry/semantic-conventions": "^1.38.0",
     "nock": "^14.0.10"
   }