chore(deps): bump the production-dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #421 · Neurowealth/Backend

dependabot · 2026-09-07T06:15:44Z

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.112.5`	`0.123.0`
@opentelemetry/auto-instrumentations-node	`0.78.0`	`0.80.0`
@opentelemetry/exporter-trace-otlp-http	`0.220.0`	`0.222.0`
@opentelemetry/sdk-node	`0.220.0`	`0.222.0`
@sentry/node	`10.71.0`	`10.73.0`
@sentry/profiling-node	`10.71.0`	`10.73.0`
@stellar/stellar-sdk	`16.2.0`	`16.3.0`
express-rate-limit	`8.6.2`	`8.7.0`
zod	`4.4.3`	`4.5.4`

Updates @anthropic-ai/sdk from 0.112.5 to 0.123.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)

api: manual updates (c6f0bda)

api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

keep credential file access out of non-Node bundles (ab6a4b2)

Chores

internal: codegen related update (788ea8b)

Documentation

changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

sdk: v0.122.0

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)

client: use configured logger for SSE parse errors (80eeaf7)

sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)

tools: let read return a view_range of a file over the size cap (#427) (56b3260)

uploads: default bare Blob filename on skills endpoints (#422) (e111649)

webhooks: require headers to be passed to unwrap() (3230804)

Chores

internal: codegen related update (c2f327a)

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)

api: manual updates (c6f0bda)

api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

keep credential file access out of non-Node bundles (ab6a4b2)

Chores

internal: codegen related update (788ea8b)

Documentation

changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

The beta Files and Skills namespaces (client.beta.files, client.beta.skills) no longer send the files-api-2025-04-14 / skills-2025-10-02 headers and return the same shapes as client.files / client.skills (with Beta-prefixed type names). Requests that still send those headers on raw HTTP keep receiving the beta shapes.

Changes in the beta namespaces:

client.beta.skills.delete() now deletes a Skill together with all of its versions (previously refused while any version existed). It returns BetaDeletedSkill (was SkillDeleteResponse).

Beta Messages type BetaSkill (the {type, skill_id, version} entry in BetaContainer.skills) is renamed BetaContainerSkill; the request-side BetaSkillParams keeps its name. BetaSkill now names the Skill object returned by client.beta.skills.create() / retrieve() / list() (replacing SkillCreateResponse / SkillRetrieveResponse / SkillListResponse), and skill versions are BetaSkillVersion / BetaDeletedSkillVersion (replacing Version*Response).

client.beta.files.list() returns a BetaFileMetadataPageCursor (PageCursor<BetaFileMetadata> with data / next_page) and FileListParams paginates with page / ids (was BetaFileMetadataPage, a Page<BetaFileMetadata> with data, has_more, first_id, last_id and before_id / after_id); for await auto-pagination is unchanged. BetaSkill uses display_name (was display_title, also in SkillCreateParams) and latest_version_id (was latest_version), and BetaSkillVersion is addressed by its skver_… id (the Unix-timestamp version field is gone).

Migration guides: Migrate from files-api-2025-04-14 · Migrate from skills-2025-10-02

Bug Fixes

client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)

client: use configured logger for SSE parse errors (80eeaf7)

sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)

tools: let read return a view_range of a file over the size cap (#427) (56b3260)

uploads: default bare Blob filename on skills endpoints (#422) (e111649)

... (truncated)

Commits

4140e0e chore: release main (#1172)
4951de0 docs(changelog): detail the beta files/skills GA-shape change (#1175)
7f3898c chore: release main
956ccb5 docs(api): clarify pagination on the organization rate-limit list endpoints
2131d80 fix(tools): let read return a view_range of a file over the size cap (#427)
f830c8f fix(aws,bedrock): prefer env credentials over AWS_PROFILE (#436)
4d50ddf test(ecosystem): expect cross-realm timeout errors to classify correctly
acdd669 fix(client): classify cross-realm DOMException abort/timeout errors correctly
0a14622 test(tools): pin that read, edit and the memory tool preserve CRLF and CR lin...
17035de docs: document TypeScript 5.0 as the minimum supported version
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.80.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-undici bumped from ^0.31.0 to ^0.32.0

... (truncated)

Commits

932fc96 chore: release main (#3638)
015582a feat(deps): update deps matching '@opentelemetry/*' (#3716)
27e172a chore: release main (#3596)
466d5de feat(deps): update deps matching '@opentelemetry/*' (#3629)
b7efd7b chore(*): migrate to sdk-trace (#3599)
3ae8a1b fix(auto-instrumentations-node): avoid duplicate diag logger warning in regis...
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.220.0 to 0.222.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

... (truncated)

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.10.0 to 2.11.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.11.0

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @opentelemetry/resources's changelog.

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @sansynx

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.220.0 to 0.222.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

... (truncated)

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-node from 2.10.0 to 2.11.0

Release notes

Sourced from @opentelemetry/sdk-trace-node's releases.

v2.11.0

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @opentelemetry/sdk-trace-node's changelog.

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @sansynx

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @sentry/node from 10.71.0 to 10.73.0

Release notes

Sourced from @sentry/node's releases.

10.73.0

Important Changes
feat(v10/nextjs): Add @sentry/nextjs/config entry point (#23766)

withSentryConfig is now available from @sentry/nextjs/config, the path it moves to in v11. Importing it from @sentry/nextjs still works on v10 but logs a warning once, so you can change your next.config file today and upgrade to v11 without touching it again.
// next.config.mjs
- import { withSentryConfig } from '@sentry/nextjs';
+ import { withSentryConfig } from '@sentry/nextjs/config';
Other Changes

feat(v10/node): Deprecate shouldHandleError on setupExpressErrorHandler and setupFasitfyErrorHandler (#23734)

fix(v10/cloudflare): Instrument Durable Object handlers installed as read-only properties (#23769)

test(v10/nextjs): Drop nextjs-16-cf-workers canary variant (#23775)

Bundle size 📦

Path Size

@sentry/browser 27.1 KB

@sentry/browser - with treeshaking flags 25.58 KB

@sentry/browser (incl. Tracing) 45.54 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.28 KB

@sentry/browser (incl. Tracing, Profiling) 50.17 KB

@sentry/browser (incl. Tracing, Replay) 83.87 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.74 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.49 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.83 KB

@sentry/browser (incl. Feedback) 43.87 KB

@sentry/browser (incl. sendFeedback) 31.78 KB

@sentry/browser (incl. FeedbackAsync) 36.79 KB

@sentry/browser (incl. Metrics) 28.16 KB

@sentry/browser (incl. Logs) 28.38 KB

@sentry/browser (incl. Metrics & Logs) 29.06 KB

@sentry/react 28.86 KB

@sentry/react (incl. Tracing) 47.74 KB

@sentry/vue 32.4 KB

@sentry/vue (incl. Tracing) 47.46 KB

@sentry/svelte 27.12 KB

CDN Bundle 29.43 KB

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.73.0

Important Changes
feat(v10/nextjs): Add @sentry/nextjs/config entry point (#23766)

withSentryConfig is now available from @sentry/nextjs/config, the path it moves to in v11. Importing it from @sentry/nextjs still works on v10 but logs a warning once, so you can change your next.config file today and upgrade to v11 without touching it again.
// next.config.mjs
- import { withSentryConfig } from '@sentry/nextjs';
+ import { withSentryConfig } from '@sentry/nextjs/config';
Other Changes

feat(v10/node): Deprecate shouldHandleError on setupExpressErrorHandler and setupFasitfyErrorHandler (#23734)

fix(v10/cloudflare): Instrument Durable Object handlers installed as read-only properties (#23769)

test(v10/nextjs): Drop nextjs-16-cf-workers canary variant (#23775)

10.72.0

Important Changes

AI integrations no longer report errors that propagate to the caller (#23638,...
Description has been truncated

…y with 11 updates Bumps the production-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.112.5` | `0.123.0` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.78.0` | `0.80.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.222.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.222.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.71.0` | `10.73.0` | | [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript) | `10.71.0` | `10.73.0` | | [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `16.2.0` | `16.3.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.6.2` | `8.7.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | Updates `@anthropic-ai/sdk` from 0.112.5 to 0.123.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.112.5...sdk-v0.123.0) Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.80.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.80.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.220.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.222.0) Updates `@opentelemetry/resources` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.222.0) Updates `@opentelemetry/sdk-trace-node` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) Updates `@sentry/node` from 10.71.0 to 10.73.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.71.0...10.73.0) Updates `@sentry/profiling-node` from 10.71.0 to 10.73.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.71.0...10.73.0) Updates `@stellar/stellar-sdk` from 16.2.0 to 16.3.0 - [Release notes](https://github.com/stellar/js-stellar-sdk/releases) - [Changelog](https://github.com/stellar/js-stellar-sdk/blob/v16.3.0/CHANGELOG.md) - [Commits](stellar/js-stellar-sdk@v16.2.0...v16.3.0) Updates `express-rate-limit` from 8.6.2 to 8.7.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.6.2...v8.7.0) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.123.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/profiling-node" dependency-version: 10.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@stellar/stellar-sdk" dependency-version: 16.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-07T06:15:45Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 11 updates - #421

chore(deps): bump the production-dependencies group across 1 directory with 11 updates#421
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-96ef9712d0

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	27.1 KB
`@sentry/browser` - with treeshaking flags	25.58 KB
`@sentry/browser` (incl. Tracing)	45.54 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.28 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.17 KB
`@sentry/browser` (incl. Tracing, Replay)	83.87 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.74 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.49 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.83 KB
`@sentry/browser` (incl. Feedback)	43.87 KB
`@sentry/browser` (incl. sendFeedback)	31.78 KB
`@sentry/browser` (incl. FeedbackAsync)	36.79 KB
`@sentry/browser` (incl. Metrics)	28.16 KB
`@sentry/browser` (incl. Logs)	28.38 KB
`@sentry/browser` (incl. Metrics & Logs)	29.06 KB
`@sentry/react`	28.86 KB
`@sentry/react` (incl. Tracing)	47.74 KB
`@sentry/vue`	32.4 KB
`@sentry/vue` (incl. Tracing)	47.46 KB
`@sentry/svelte`	27.12 KB
CDN Bundle	29.43 KB

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

sdk: v0.123.0

0.123.0 (2026-09-01)

Features

Bug Fixes

Chores

Documentation

sdk: v0.122.0

0.122.0 (2026-08-27)

Features

Bug Fixes

Chores

0.123.0 (2026-09-01)

Features

Bug Fixes

Chores

Documentation

0.122.0 (2026-08-27)

Features

Bug Fixes

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

Dependencies

0.80.0 (2026-08-31)

Features

Dependencies

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.11.0

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.11.0

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

10.73.0

Important Changes

Other Changes

Bundle size 📦

10.73.0

Important Changes

Other Changes

10.72.0

Important Changes

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026