chore(deps-dev): bump @opentelemetry/core from 2.0.1 to 2.8.0#844
Conversation
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM, straightforward dev dependency bump.
Extended reasoning...
Overview
This PR is a Dependabot-generated bump of the dev dependency @opentelemetry/core from ^2.0.1 to ^2.8.0. Only package.json and pnpm-lock.yaml are modified, with incidental transitive bumps to @babel/* packages in the lockfile.
Security risks
None. @opentelemetry/core is a devDependency and not shipped to consumers, and the release notes don't contain anything alarming (the most notable items are baggage-header size limits and TraceState validation changes, neither of which affect this repo's usage).
Level of scrutiny
Minimal. This is a routine, mechanical dev-dependency upgrade with no source code changes. CI (build/test/typecheck) will catch any compatibility issue with the new version.
Other factors
No bugs were found by the bug hunting system. The PR is authored by Dependabot and tagged dependencies/javascript. Vercel preview build is already running.
cde7f6b to
a914ea0
Compare
a914ea0 to
0f49be8
Compare
0f49be8 to
f142828
Compare
f142828 to
88fb531
Compare
88fb531 to
194378d
Compare
Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) from 2.0.1 to 2.8.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.0.1...v2.8.0) --- updated-dependencies: - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
194378d to
e720ccc
Compare
|
Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request. |
1 participant
Bumps @opentelemetry/core from 2.0.1 to 2.8.0.
Release notes
Sourced from @opentelemetry/core's releases.
... (truncated)
Changelog
Sourced from @opentelemetry/core's changelog.
... (truncated)
Commits
13a035bchore: prepare next release (#6756)4b13587Merge commit from fork71d195cchore(renovate): set minimumReleaseAge to 3 days (#6792)555fca6Update renovate.json to use matchManagers (#6141)b711a81docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...da70402fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)002267bchore: complete the move to the smaller SPDX license header (#6791)056ef9cfeat(sdk-metrics): implement metric reader metrics (#6449)3bd69cefix(configuration): improve environment variable substitution to handle all t...bfbda7cdocs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@opentelemetry/coresince your current version.