[Snyk] Upgrade @opentelemetry/instrumentation-fetch from 0.49.1 to 0.50.0 #1019

Closed
opened 2026-04-05 16:24:51 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @simlarsen on 5/5/2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @opentelemetry/instrumentation-fetch from 0.49.1 to 0.50.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released a month ago, on 2024-04-03.
Release notes
Package name: @opentelemetry/instrumentation-fetch
  • 0.50.0 - 2024-04-03

    0.50.0

    💥 Breaking Change

    • fix(exporter-*-otlp-grpc)!: lazy load gRPC to improve compatibility with @ opentelemetry/instrumenation-grpc #4432 @ pichlermarc
      • Fixes a bug where requiring the gRPC exporter before enabling the instrumentation from @ opentelemetry/instrumentation-grpc would lead to missing telemetry
      • Breaking changes, removes several functions and properties that were used internally and were not intended for end-users
        • getServiceClientType()
          • this returned a static enum value that would denote the export type (SPAN, METRICS, LOGS)
        • getServiceProtoPath()
          • this returned a static enum value that would correspond to the gRPC service path
        • metadata
          • was used internally to access metadata, but as a side effect allowed end-users to modify metadata on runtime.
        • serviceClient
          • was used internally to keep track of the service client used by the exporter, as a side effect it allowed end-users to modify the gRPC service client that was used
        • compression
          • was used internally to keep track of the compression to use but was unintentionally exposed to the users. It allowed to read and write the value, writing, however, would have no effect.
    • feat(api-events)!: removed domain from the Events API #4569 @ martinkuba
    • fix(api-events)!: renamed EventEmitter to EventLogger in the Events API #4569 @ martinkuba
    • feat(api-logs)!: changed LogRecord body data type to AnyValue and AnyValueMap types #4575 @ martinkuba

    🚀 (Enhancement)

    🐛 (Bug Fix)

    • fix(exporter--otlp-): use parseHeaders() to ensure header-values are not 'undefined' #4540
      • Fixes a bug where passing undefined as a header value would crash the end-user app after the export timeout elapsed.
    • fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider.

    📚 (Refine Doc)

    • docs(instrumentation-http): document semantic conventions and attributes in use. #4587 @ JamieDanielson
  • 0.49.1 - 2024-02-29

    0.49.1

    🐛 (Bug Fix)

    • fix(instrumentation): don't add @ opentelemetry/api-logs as a peerDependency #4515 @ pichlermarc
from @opentelemetry/instrumentation-fetch GitHub release notes
Commit messages
Package name: @opentelemetry/instrumentation-fetch
  • 5231aa2 chore: prepare release 1.23.0/0.50.0 (#4601)
  • 928796d feat(sdk-metrics): added synchronous gauge to SDK (#4565)
  • d66e1d7 Add `data` field to the Event interface (#4575)
  • f3aedb7 chore(deps): bump express from 4.17.3 to 4.19.2 (#4591)
  • b418d36 perf(instrumentation-http): remove obvious temp allocations (#4576)
  • 9a5688e chore(deps): update dependency chromedriver to v123 (#4577)
  • 1a0fb4f docs(instr-http): document semantic conventions and attributes in use (#4587)
  • 900b7d8 feat(opentelemetry-instrumentation-xhr): optionally ignore network events (#4571)
  • f6a075b Rename EventEmitter to EventLogger in the Events API (#4568)
  • 97af8e6 feat(sdk-node): add `HostDetector` as default resource detector (#4566)
  • fec6286 Remove domain from the Events API (#4569)
  • 5fb65b4 perf(export): do not allocate arrays if resource has no pending async attributes (#4550)
  • f9a0d3e refactor(instr-http): use exported strings for semconv (#4573)
  • 6547440 fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider (#4564)
  • 5489797 chore(changelog): move entry that accidentally ended up in a previous version (#4559)
  • aabd1a9 SBOM workflow using "npm sbom" (#4521)
  • 3a426e8 fix(exporters): use parseHeaders() to ensure header-values are not 'undefined' (#4540)
  • 1b4999f docs: spelling corrections (#4530)
  • 7fa2c84 chore(deps-dev): bump ip from 1.1.8 to 1.1.9 (#4495)
  • 63d74cd chore(renovate): remove import-in-the-middle from all-patch group (#4513)
  • 5a033e5 fix(exporter-*-otlp-grpc)!: lazy load gRPC (#4432)
  • 75bd723 fix: ConsoleMetricExporter Should Not Export Shallowly (#4522)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

*Originally created by @simlarsen on 5/5/2024* <p>This PR was automatically created by Snyk using the credentials of a real user.</p><br /><h3>Snyk has created this PR to upgrade @opentelemetry/instrumentation-fetch from 0.49.1 to 0.50.0.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **1 version** ahead of your current version. - The recommended version was released **a month ago**, on 2024-04-03. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@opentelemetry/instrumentation-fetch</b></summary> <ul> <li> <b>0.50.0</b> - <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.50.0">2024-04-03</a></br><h2>0.50.0</h2> <h3>💥 Breaking Change</h3> <ul> <li>fix(exporter-*-otlp-grpc)!: lazy load gRPC to improve compatibility with <code>@ opentelemetry/instrumenation-grpc</code> <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4432" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4432/hovercard">#4432</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a> <ul> <li>Fixes a bug where requiring the gRPC exporter before enabling the instrumentation from <code>@ opentelemetry/instrumentation-grpc</code> would lead to missing telemetry</li> <li>Breaking changes, removes several functions and properties that were used internally and were not intended for end-users <ul> <li><code>getServiceClientType()</code> <ul> <li>this returned a static enum value that would denote the export type (<code>SPAN</code>, <code>METRICS</code>, <code>LOGS</code>)</li> </ul> </li> <li><code>getServiceProtoPath()</code> <ul> <li>this returned a static enum value that would correspond to the gRPC service path</li> </ul> </li> <li><code>metadata</code> <ul> <li>was used internally to access metadata, but as a side effect allowed end-users to modify metadata on runtime.</li> </ul> </li> <li><code>serviceClient</code> <ul> <li>was used internally to keep track of the service client used by the exporter, as a side effect it allowed end-users to modify the gRPC service client that was used</li> </ul> </li> <li><code>compression</code> <ul> <li>was used internally to keep track of the compression to use but was unintentionally exposed to the users. It allowed to read and write the value, writing, however, would have no effect.</li> </ul> </li> </ul> </li> </ul> </li> <li>feat(api-events)!: removed domain from the Events API <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4569" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4569/hovercard">#4569</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinkuba/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/martinkuba">@ martinkuba</a></li> <li>fix(api-events)!: renamed EventEmitter to EventLogger in the Events API <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4568" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4568/hovercard">#4569</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinkuba/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/martinkuba">@ martinkuba</a></li> <li>feat(api-logs)!: changed LogRecord body data type to AnyValue and AnyValueMap types <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4575" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4575/hovercard">#4575</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinkuba/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/martinkuba">@ martinkuba</a></li> </ul> <h3>🚀 (Enhancement)</h3> <ul> <li>feat(instrumentation-xhr): optionally ignore network events <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4571/" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4571/hovercard">#4571</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MustafaHaddara/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MustafaHaddara">@ MustafaHaddara</a></li> <li>refactor(instrumentation-http): use exported strings for semconv <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4573/" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4573/hovercard">#4573</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieDanielson/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/JamieDanielson">@ JamieDanielson</a></li> <li>perf(instrumentation-http): remove obvious temp allocations <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4576" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4576/hovercard">#4576</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Samuron/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/Samuron">@ Samuron</a></li> <li>feat(sdk-node): add <code>HostDetector</code> as default resource detector <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4566" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4566/hovercard">#4566</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/maryliag">@ maryliag</a></li> <li>feat(api-events): added data field to the Event interface <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4575" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4575/hovercard">#4575</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinkuba/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/martinkuba">@ martinkuba</a></li> </ul> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(exporter-<em>-otlp-</em>): use parseHeaders() to ensure header-values are not 'undefined' <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2181564128" data-permission-text="Title is private" data-url="https://github.com/open-telemetry/opentelemetry-js/issues/4540" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4540/hovercard" href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4540">#4540</a> <ul> <li>Fixes a bug where passing <code>undefined</code> as a header value would crash the end-user app after the export timeout elapsed.</li> </ul> </li> <li>fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider.</li> </ul> <h3>📚 (Refine Doc)</h3> <ul> <li>docs(instrumentation-http): document semantic conventions and attributes in use. <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4587/" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4587/hovercard">#4587</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JamieDanielson/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/JamieDanielson">@ JamieDanielson</a></li> </ul> </li> <li> <b>0.49.1</b> - <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.49.1">2024-02-29</a></br><h2>0.49.1</h2> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(instrumentation): don't add <code>@ opentelemetry/api-logs</code> as a <code>peerDependency</code> <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/pull/4515" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4515/hovercard">#4515</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/pichlermarc">@ pichlermarc</a></li> </ul> </li> </ul> from <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/releases">@opentelemetry/instrumentation-fetch GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@opentelemetry/instrumentation-fetch</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5231aa255047fbc6ee3d6a299f4423ab2f8a5fbc">5231aa2</a> chore: prepare release 1.23.0/0.50.0 (#4601)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/928796d8532dea7ba81c73a1bc8ee49266da2d12">928796d</a> feat(sdk-metrics): added synchronous gauge to SDK (#4565)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/d66e1d75d40950468e7f8e06cab7ba6633dbd182">d66e1d7</a> Add &#x60;data&#x60; field to the Event interface (#4575)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f3aedb76ff00ca82281f8d2bf94a19714487f1d6">f3aedb7</a> chore(deps): bump express from 4.17.3 to 4.19.2 (#4591)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/b418d36609c371d1fcae46898e9ede6278aca917">b418d36</a> perf(instrumentation-http): remove obvious temp allocations (#4576)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/9a5688e61feb9ecf94bbef45352563287639b6a7">9a5688e</a> chore(deps): update dependency chromedriver to v123 (#4577)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/1a0fb4fd5fd79d615d644afa42c796ebf8163d2a">1a0fb4f</a> docs(instr-http): document semantic conventions and attributes in use (#4587)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/900b7d8bfc52d9ebcd17657f4222e8a7fd17b55b">900b7d8</a> feat(opentelemetry-instrumentation-xhr): optionally ignore network events (#4571)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f6a075be3204befa970cd4b7d6101419ee5d562e">f6a075b</a> Rename EventEmitter to EventLogger in the Events API (#4568)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/97af8e6d4d6312fec84817e7b35c182e008461f1">97af8e6</a> feat(sdk-node): add &#x60;HostDetector&#x60; as default resource detector (#4566)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/fec6286127129ec0082e5dd080242501f15ea0af">fec6286</a> Remove domain from the Events API (#4569)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5fb65b4145eb90b868a90a566d632e788a293b32">5fb65b4</a> perf(export): do not allocate arrays if resource has no pending async attributes (#4550)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/f9a0d3ec33fe48f5a9d4a649ff67d4b83efd2fa3">f9a0d3e</a> refactor(instr-http): use exported strings for semconv (#4573)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/65474404326d6ffbdd8e84799e88a46bfe66632a">6547440</a> fix(sdk-logs): ensure default resource attributes are used as fallbacks when a resource is passed to LoggerProvider (#4564)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5489797344b2a56a89140ff27a615754f9d2759f">5489797</a> chore(changelog): move entry that accidentally ended up in a previous version (#4559)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/aabd1a9b001ae9c8190bf2ddc1f3c8fe3a94a74d">aabd1a9</a> SBOM workflow using &quot;npm sbom&quot; (#4521)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/3a426e8c32b9a3db691ba4225dadc52de62e660f">3a426e8</a> fix(exporters): use parseHeaders() to ensure header-values are not &#x27;undefined&#x27; (#4540)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/1b4999f386e0240b7f65350e8360ccc2930b0fe6">1b4999f</a> docs: spelling corrections (#4530)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/7fa2c84e6f5f3e50dba9830ae0cb020250977a61">7fa2c84</a> chore(deps-dev): bump ip from 1.1.8 to 1.1.9 (#4495)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/63d74cdc366fc337be66c1a766a2cc8e5275a85a">63d74cd</a> chore(renovate): remove import-in-the-middle from all-patch group (#4513)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/5a033e50b3eeea014a1ab4ca8b09d512f0029e20">5a033e5</a> fix(exporter-*-otlp-grpc)!: lazy load gRPC (#4432)</li> <li><a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/commit/75bd7233ea1140cb5c185e6e50aec16485df6601">75bd723</a> fix: ConsoleMetricExporter Should Not Export Shallowly (#4522)</li> </ul> <a href="https://snyk.io/redirect/github/open-telemetry/opentelemetry-js/compare/3920b158d08daa776280bde68a79e44bafa4e8ea...5231aa255047fbc6ee3d6a299f4423ab2f8a5fbc">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJjY2E3Mzg1Ny1kMjRmLTRiZjQtOTQ0OS0zNjMwYjRmZWU4OWIiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImNjYTczODU3LWQyNGYtNGJmNC05NDQ5LTM2MzBiNGZlZTg5YiJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?pkg&#x3D;@opentelemetry/instrumentation-fetch&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"cca73857-d24f-4bf4-9449-3630b4fee89b","prPublicId":"cca73857-d24f-4bf4-9449-3630b4fee89b","dependencies":[{"name":"@opentelemetry/instrumentation-fetch","from":"0.49.1","to":"0.50.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"47001ef1-7b3a-49c2-88cd-8025c56346d0","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2024-04-03T08:10:10.017Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[]}) --->
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/oneuptime#1019