[Snyk] Upgrade @opentelemetry/sdk-trace-web from 1.22.0 to 1.23.0 #1014

Closed
opened 2026-04-05 16:24:51 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @simlarsen on 5/7/2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @opentelemetry/sdk-trace-web from 1.22.0 to 1.23.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released a month ago, on 2024-04-03.
Release notes
Package name: @opentelemetry/sdk-trace-web
  • 1.23.0 - 2024-04-03

    1.23.0

    🚀 (Enhancement)

    • perf(sdk-trace-base): do not allocate arrays if resource has no pending async attributes #4576 @ Samuron
    • feat(sdk-metrics): added experimental synchronous gauge to SDK #4565 @ clintonb
      • this change will become user-facing in an upcoming release

    🐛 (Bug Fix)

    • fix(sdk-metrics): increase the depth of the output to the console such that objects in the metric are printed fully to the console #4522 @ JacksonWeber
  • 1.22.0 - 2024-02-29

    1.22.0

    🚀 (Enhancement)

    🐛 (Bug Fix)

    • fix(sdk-metrics): handle zero bucket counts in exponential histogram merge #4459 @ mwear
    • fix(sdk-metrics): ignore NaN value recordings in Histograms #4455 @ pichlermarc
      • fixes a bug where recording NaN on a histogram would result in the sum of bucket count values not matching the overall count
    • fix(sdk-metrics): allow single bucket histograms #4456 @ pichlermarc
      • fixes a bug where Meter.createHistogram() with the advice explicitBucketBoundaries: [] would throw
    • fix(context-zone-peer-dep, context-zone): support zone.js 0.13.x, 0.14.x #4469 @ pichlermarc

    📚 (Refine Doc)

from @opentelemetry/sdk-trace-web GitHub release notes
Commit messages
Package name: @opentelemetry/sdk-trace-web
  • 5231aa2 chore: prepare release 1.23.0/0.50.0 (#4601)
  • 928796d feat(sdk-metrics): added synchronous gauge to SDK (#4565)
  • d66e1d7 Add `data` field to the Event interface (#4575)
  • f3aedb7 chore(deps): bump express from 4.17.3 to 4.19.2 (#4591)
  • b418d36 perf(instrumentation-http): remove obvious temp allocations (#4576)
  • 9a5688e chore(deps): update dependency chromedriver to v123 (#4577)
  • 1a0fb4f docs(instr-http): document semantic conventions and attributes in use (#4587)
  • 900b7d8 feat(opentelemetry-instrumentation-xhr): optionally ignore network events (#4571)
  • f6a075b Rename EventEmitter to EventLogger in the Events API (#4568)
  • 97af8e6 feat(sdk-node): add `HostDetector` as default resource detector (#4566)
  • fec6286 Remove domain from the Events API (#4569)
  • 5fb65b4 perf(export): do not allocate arrays if resource has no pending async attributes (#4550)
  • f9a0d3e refactor(instr-http): use exported strings for semconv (#4573)
  • 6547440 fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider (#4564)
  • 5489797 chore(changelog): move entry that accidentally ended up in a previous version (#4559)
  • aabd1a9 SBOM workflow using "npm sbom" (#4521)
  • 3a426e8 fix(exporters): use parseHeaders() to ensure header-values are not 'undefined' (#4540)
  • 1b4999f docs: spelling corrections (#4530)
  • 7fa2c84 chore(deps-dev): bump ip from 1.1.8 to 1.1.9 (#4495)
  • 63d74cd chore(renovate): remove import-in-the-middle from all-patch group (#4513)
  • 5a033e5 fix(exporter-*-otlp-grpc)!: lazy load gRPC (#4432)
  • 75bd723 fix: ConsoleMetricExporter Should Not Export Shallowly (#4522)
  • 3920b15 chore: prepare release Experimental 0.49.1 (#4517)
  • 8e1996e fix(instrumentation): remove peer-dependency on @ opentelemetry/api-logs (#4515)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

*Originally created by @simlarsen on 5/7/2024* <p>This PR was automatically created by Snyk using the credentials of a real user.</p><br /><h3>Snyk has created this PR to upgrade @opentelemetry/sdk-trace-web from 1.22.0 to 1.23.0.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **1 version** ahead of your current version. - The recommended version was released **a month ago**, on 2024-04-03. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@opentelemetry/sdk-trace-web</b></summary> <ul> <li> <b>1.23.0</b> - <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases/tag/v1.23.0">2024-04-03</a></br><h2>1.23.0</h2> <h3>🚀 (Enhancement)</h3> <ul> <li>perf(sdk-trace-base): do not allocate arrays if resource has no pending async attributes <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4576" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4576/hovercard">#4576</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Samuron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/Samuron">@ Samuron</a></li> <li>feat(sdk-metrics): added experimental synchronous gauge to SDK <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4565" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4565/hovercard">#4565</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/clintonb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/clintonb">@ clintonb</a> <ul> <li>this change will become user-facing in an upcoming release</li> </ul> </li> </ul> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(sdk-metrics): increase the depth of the output to the console such that objects in the metric are printed fully to the console <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4522" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4522/hovercard">#4522</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JacksonWeber/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/JacksonWeber">@ JacksonWeber</a></li> </ul> </li> <li> <b>1.22.0</b> - <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases/tag/v1.22.0">2024-02-29</a></br><h2>1.22.0</h2> <h3>🚀 (Enhancement)</h3> <ul> <li>feat(sdk-metrics): allow single bucket histograms <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4456" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4456/hovercard">#4456</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a></li> <li>feat(context-zone-peer-dep, context-zone): support zone.js 0.13.x, 0.14.x <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4469" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4469/hovercard">#4469</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a></li> <li>chore: Semantic Conventions export individual strings <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/issues/4185" data-hovercard-type="issue" data-hovercard-url="/open-telemetry/opentelemetry-js/issues/4185/hovercard">4185</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MSNev/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MSNev">@ MSNev</a></li> </ul> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(sdk-metrics): handle zero bucket counts in exponential histogram merge <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4459" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4459/hovercard">#4459</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mwear/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/mwear">@ mwear</a></li> <li>fix(sdk-metrics): ignore <code>NaN</code> value recordings in Histograms <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4455" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4455/hovercard">#4455</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a> <ul> <li>fixes a bug where recording <code>NaN</code> on a histogram would result in the sum of bucket count values not matching the overall count</li> </ul> </li> <li>fix(sdk-metrics): allow single bucket histograms <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4456" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4456/hovercard">#4456</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a> <ul> <li>fixes a bug where <code>Meter.createHistogram()</code> with the advice <code>explicitBucketBoundaries: []</code> would throw</li> </ul> </li> <li>fix(context-zone-peer-dep, context-zone): support zone.js 0.13.x, 0.14.x <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4469" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4469/hovercard">#4469</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a> <ul> <li>fixes a bug where old versions of <code>zone.js</code> affected by <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2036556559" data-permission-text="Title is private" data-url="https://github.com/angular/angular/issues/53507" data-hovercard-type="issue" data-hovercard-url="/angular/angular/issues/53507/hovercard" href="https://snyk.io/redirect/github/angular/angular/issues/53507">angular/angular#53507</a> would be pulled in</li> </ul> </li> </ul> <h3>📚 (Refine Doc)</h3> <ul> <li>docs: shorten readme sections <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4460" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4460/hovercard">#4460</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/legendecas/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/legendecas">@ legendecas</a></li> </ul> </li> </ul> from <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases">@opentelemetry/sdk-trace-web GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@opentelemetry/sdk-trace-web</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5231aa255047fbc6ee3d6a299f4423ab2f8a5fbc">5231aa2</a> chore: prepare release 1.23.0/0.50.0 (#4601)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/928796d8532dea7ba81c73a1bc8ee49266da2d12">928796d</a> feat(sdk-metrics): added synchronous gauge to SDK (#4565)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/d66e1d75d40950468e7f8e06cab7ba6633dbd182">d66e1d7</a> Add &#x60;data&#x60; field to the Event interface (#4575)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f3aedb76ff00ca82281f8d2bf94a19714487f1d6">f3aedb7</a> chore(deps): bump express from 4.17.3 to 4.19.2 (#4591)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/b418d36609c371d1fcae46898e9ede6278aca917">b418d36</a> perf(instrumentation-http): remove obvious temp allocations (#4576)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/9a5688e61feb9ecf94bbef45352563287639b6a7">9a5688e</a> chore(deps): update dependency chromedriver to v123 (#4577)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/1a0fb4fd5fd79d615d644afa42c796ebf8163d2a">1a0fb4f</a> docs(instr-http): document semantic conventions and attributes in use (#4587)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/900b7d8bfc52d9ebcd17657f4222e8a7fd17b55b">900b7d8</a> feat(opentelemetry-instrumentation-xhr): optionally ignore network events (#4571)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f6a075be3204befa970cd4b7d6101419ee5d562e">f6a075b</a> Rename EventEmitter to EventLogger in the Events API (#4568)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/97af8e6d4d6312fec84817e7b35c182e008461f1">97af8e6</a> feat(sdk-node): add &#x60;HostDetector&#x60; as default resource detector (#4566)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/fec6286127129ec0082e5dd080242501f15ea0af">fec6286</a> Remove domain from the Events API (#4569)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5fb65b4145eb90b868a90a566d632e788a293b32">5fb65b4</a> perf(export): do not allocate arrays if resource has no pending async attributes (#4550)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f9a0d3ec33fe48f5a9d4a649ff67d4b83efd2fa3">f9a0d3e</a> refactor(instr-http): use exported strings for semconv (#4573)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/65474404326d6ffbdd8e84799e88a46bfe66632a">6547440</a> fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider (#4564)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5489797344b2a56a89140ff27a615754f9d2759f">5489797</a> chore(changelog): move entry that accidentally ended up in a previous version (#4559)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/aabd1a9b001ae9c8190bf2ddc1f3c8fe3a94a74d">aabd1a9</a> SBOM workflow using &quot;npm sbom&quot; (#4521)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/3a426e8c32b9a3db691ba4225dadc52de62e660f">3a426e8</a> fix(exporters): use parseHeaders() to ensure header-values are not &#x27;undefined&#x27; (#4540)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/1b4999f386e0240b7f65350e8360ccc2930b0fe6">1b4999f</a> docs: spelling corrections (#4530)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/7fa2c84e6f5f3e50dba9830ae0cb020250977a61">7fa2c84</a> chore(deps-dev): bump ip from 1.1.8 to 1.1.9 (#4495)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/63d74cdc366fc337be66c1a766a2cc8e5275a85a">63d74cd</a> chore(renovate): remove import-in-the-middle from all-patch group (#4513)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5a033e50b3eeea014a1ab4ca8b09d512f0029e20">5a033e5</a> fix(exporter-*-otlp-grpc)!: lazy load gRPC (#4432)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/75bd7233ea1140cb5c185e6e50aec16485df6601">75bd723</a> fix: ConsoleMetricExporter Should Not Export Shallowly (#4522)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/3920b158d08daa776280bde68a79e44bafa4e8ea">3920b15</a> chore: prepare release Experimental 0.49.1 (#4517)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/8e1996ef0d0ad5c531f793b2a1571c7101bf94de">8e1996e</a> fix(instrumentation): remove peer-dependency on @ opentelemetry/api-logs (#4515)</li> </ul> <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/compare/7be35c7845e206b27b682e8ce1cee850b09cec04...5231aa255047fbc6ee3d6a299f4423ab2f8a5fbc">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIwYTNmMGYzMS1jOTFkLTRkMDctYWUzYi02NWFlZDhjZWQxYTUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjBhM2YwZjMxLWM5MWQtNGQwNy1hZTNiLTY1YWVkOGNlZDFhNSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?pkg&#x3D;@opentelemetry/sdk-trace-web&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"0a3f0f31-c91d-4d07-ae3b-65aed8ced1a5","prPublicId":"0a3f0f31-c91d-4d07-ae3b-65aed8ced1a5","dependencies":[{"name":"@opentelemetry/sdk-trace-web","from":"1.22.0","to":"1.23.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"47001ef1-7b3a-49c2-88cd-8025c56346d0","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2024-04-03T08:10:07.345Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[]}) --->
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/oneuptime#1014