[Snyk] Upgrade @opentelemetry/exporter-metrics-otlp-proto from 0.52.1 to 0.207.0 #283

Closed
opened 2026-04-05 16:19:16 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @simlarsen on 11/11/2025

snyk-top-banner

Snyk has created this PR to upgrade @opentelemetry/exporter-metrics-otlp-proto from 0.52.1 to 0.207.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 21 versions ahead of your current version.

  • The recommended version was released 21 days ago.

Release notes
Package name: @opentelemetry/exporter-metrics-otlp-proto
  • 0.207.0 - 2025-10-21

    0.207.0

    💥 Breaking Changes

    🚀 Features

    • feat(sdk-node): always set up propagtion and context manager #5930
      • using (new NodeSDK).start() will now automatically set up a context management and propagation, even if no Trace SDK
        is initialized.
    • feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP & GRPC exporters #5928 @ david-luna
    • feat(web): add session handling implementation 5173 @ martinkuba

    🐛 Bug Fixes

    • fix(sdk-logs): Fix the batchLogProcessor exporting only upon _scheduledDelayMillis and ignoring maxExportBatchSize #5961 @ JacksonWeber
    • fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header #5687 @ david-luna

    🏠 Internal

    • test(opentelemetry-configuration): simplify management of environment variables #6004 @ cjihrig
    • test(opentelemetry-configuration): preserve special process.env behavior #6010 @ cjihrig
    • test(sdk-logs): ensure process.env is cleaned up between tests #6017 @ cjihrig
    • test(otlp-grpc-exporter-base): remove duplicated delete statements #6022 @ cjihrig
    • test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests #6026 @ cjihrig
  • 0.206.0 - 2025-10-06

    0.206.0

    🚀 Features

    • feat(otlp-transformer): add span flags support for isRemote property #5910 @ nikhilmantri0902
    • feat(sampler-composite): Added experimental implementations of draft composite sampling spec #5839 @ anuraaga
    • feat(opentelemetry-configuration): add more attributes to config model #5826 @ maryliag
    • feat(opentelemetry-configuration): Parse of Configuration File #5875 @ maryliag
    • feat(opentelemetry-configuration): parse of array objects on configuration file #5947 @ maryliag
    • feat(opentelemetry-configuration): parse of environment variables on configuration file #5947 @ maryliag

    🐛 Bug Fixes

    • fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used #4788 @ reberhardt7
    • fix(otlp-transformer): trunc hrTime to int for nanos converting #5924 @ blumamir

    🏠 Internal

    • refactor(otlp-exporter-base): use get*FromEnv() for otlp exporter config. #5583 @ weyert
  • 0.205.0 - 2025-09-10

    0.205.0

    💥 Breaking Changes

    • fix(otlp-exporter-base)!: split node and browser config types in two #5917 @ pichlermarc
      • Fixes a bug where Node.js modules would be incorrectly used in the instantiation of a web-targeted exporter
      • Breaking changes:
        • (user-facing) createOtlpHttpExportDelegate(OtlpHttpConfiguration) has been changed to take a different, but identical type OtlpNodeHttpConfiguration to differentiate it from the web-targeted exporters
        • (user-facing) convertLegacyHttpOptions(...) now returns OtlpNodeHttpConfiguration, the returned object's contents remain identical.
        • (user-facing) agentFactory has been dropped from OtlpHttpConfiguration as it is node-specific and is now part of OtlpNodeHttpConfiguration instead
  • 0.204.0 - 2025-09-04

    0.204.0

    💥 Breaking Changes

    • feat(api-logs)!: Marked private methods as "conventionally private". #5789
    • feat(exporter-otlp-*): support custom HTTP agents #5719 @ raphael-theriault-swi
      • OtlpHttpConfiguration.agentOptions has been removed and functionality has been rolled into OtlpHttpConfiguration.agentFactory
        • (old) { agentOptions: myOptions }
        • (new) { agentFactory: httpAgentFactoryFromOptions(myOptions) }

    🚀 Features

    • feat(otlp-exporter-base): Add fetch transport for fetch-only environments like service workers. #5807
      • when using headers, the Browser exporter now prefers fetch over XMLHttpRequest if present. Sending via XMLHttpRequest will be removed in a future release.
    • feat(opentelemetry-configuration): creation of basic ConfigProvider #5809 @ maryliag
    • feat(opentelemetry-configuration): creation of basic FileConfigProvider #5863 @ maryliag
    • feat(sdk-node): Add support for multiple metric readers via the new metricReaders option in NodeSDK configuration. Users can now register multiple metric readers (e.g., Console, Prometheus) directly through the NodeSDK constructor. The old metricReader (singular) option is now deprecated and will show a warning if used, but remains supported for backward compatibility. Comprehensive tests and documentation have been added. #5760
      • Migration:

        • Before:

          const sdk = new NodeSDK({ metricReader: myMetricReader });
        • After:

          const sdk = new NodeSDK({ metricReaders: [myMetricReader] });
      • Users should migrate to the new metricReaders array option for future compatibility. The old option will be removed in an upcoming experimental version.

    • feat(instrumentation-http): Added support for redacting specific url query string values and url credentials #5743 @ rads-1996

    🐛 Bug Fixes

    • fix(otlp-exporter-base): prioritize esnext export condition as it is more specific #5458
    • fix(otlp-exporter-base): consider relative urls as valid in browser environments #5807
    • fix(instrumentation-fetch): Use ESM version of semconv instead of CJS. Users expecting mixed ESM and CJS modules will now only get ESM modules. #5878 @ overbalance

    🏠 Internal

  • 0.203.0 - 2025-07-09
  • 0.202.0 - 2025-06-02
  • 0.201.1 - 2025-05-19
  • 0.201.0 - 2025-05-15
  • 0.200.0 - 2025-03-17
  • 0.200.0-rc.1 - 2025-03-12
  • 0.200.0-dev.1 - 2025-03-05
  • 0.200.0-dev.0 - 2025-02-24
  • 0.57.2 - 2025-02-13
  • 0.57.1 - 2025-01-14
  • 0.57.0 - 2024-12-18
  • 0.56.0 - 2024-12-04
  • 0.55.0 - 2024-11-18
  • 0.54.2 - 2024-11-07
  • 0.54.1 - 2024-11-05
  • 0.54.0 - 2024-10-23
  • 0.53.0 - 2024-08-28
  • 0.52.1 - 2024-06-20
from @opentelemetry/exporter-metrics-otlp-proto GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

*Originally created by @simlarsen on 11/11/2025* ![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg) <h3>Snyk has created this PR to upgrade @opentelemetry/exporter-metrics-otlp-proto from 0.52.1 to 0.207.0.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **21 versions** ahead of your current version. - The recommended version was released **21 days ago**. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@opentelemetry/exporter-metrics-otlp-proto</b></summary> <ul> <li> <b>0.207.0</b> - <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.207.0">2025-10-21</a></br><h2>0.207.0</h2> <h3>💥 Breaking Changes</h3> <ul> <li>feat(sdk-node)!: drop lazy-loading of jaeger exporter <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5989" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5989/hovercard">#5989</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/pichlermarc">@ pichlermarc</a> <ul> <li>(user-facing): setting <code>OTEL_TRACE_EXPORTER=jaeger</code> not instantiate a Jaeger exporter anymore, please use <code>OTEL_TRACE_EXPORTER=otlp</code> instead. <ul> <li>Jaeger now has <a href="https://www.jaegertracing.io/docs/1.73/architecture/apis/#opentelemetry-protocol-stable" rel="nofollow">native API support for OTLP</a> and <a href="https://www.jaegertracing.io/docs/1.73/architecture/apis/#thrift-over-http-stable" rel="nofollow">Jaeger's Thrift API endpoints have been deprecated</a></li> </ul> </li> </ul> </li> <li>feat(otlp-exporter-base): check <code>OTEL_EXPORTER_OTLP_CERTIFICATE</code> and other related env vars when resolving configuration for OTLP HTTP exporters <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6015" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6015/hovercard">#6015</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/david-luna/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/david-luna">@ david-luna</a></li> </ul> <h3>🚀 Features</h3> <ul> <li>feat(sdk-node): always set up propagtion and context manager <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5930" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5930/hovercard">#5930</a> <ul> <li>using <code>(new NodeSDK).start()</code> will now automatically set up a context management and propagation, even if no Trace SDK<br> is initialized.</li> </ul> </li> <li>feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP &amp; GRPC exporters <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5928" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5928/hovercard">#5928</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/david-luna/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/david-luna">@ david-luna</a></li> <li>feat(web): add session handling implementation <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5173" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5173/hovercard">5173</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/martinkuba/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/martinkuba">@ martinkuba</a></li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li>fix(sdk-logs): Fix the <code>batchLogProcessor</code> exporting only upon <code>_scheduledDelayMillis</code> and ignoring <code>maxExportBatchSize</code> <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5961" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5961/hovercard">#5961</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/JacksonWeber/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/JacksonWeber">@ JacksonWeber</a></li> <li>fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/5867" data-hovercard-type="issue" data-hovercard-url="/open-telemetry/opentelemetry-js/issues/5867/hovercard">#5687</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/david-luna/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/david-luna">@ david-luna</a></li> </ul> <h3>🏠 Internal</h3> <ul> <li>test(opentelemetry-configuration): simplify management of environment variables <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6004" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6004/hovercard">#6004</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cjihrig/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/cjihrig">@ cjihrig</a></li> <li>test(opentelemetry-configuration): preserve special process.env behavior <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6010" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6010/hovercard">#6010</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cjihrig/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/cjihrig">@ cjihrig</a></li> <li>test(sdk-logs): ensure process.env is cleaned up between tests <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6017" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6017/hovercard">#6017</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cjihrig/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/cjihrig">@ cjihrig</a></li> <li>test(otlp-grpc-exporter-base): remove duplicated delete statements <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6022" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6022/hovercard">#6022</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cjihrig/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/cjihrig">@ cjihrig</a></li> <li>test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6026" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/6026/hovercard">#6026</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cjihrig/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/cjihrig">@ cjihrig</a></li> </ul> </li> <li> <b>0.206.0</b> - <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.206.0">2025-10-06</a></br><h2>0.206.0</h2> <h3>🚀 Features</h3> <ul> <li>feat(otlp-transformer): add span flags support for isRemote property <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5910" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5910/hovercard">#5910</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/nikhilmantri0902/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/nikhilmantri0902">@ nikhilmantri0902</a></li> <li>feat(sampler-composite): Added experimental implementations of draft composite sampling spec <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5839" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5839/hovercard">#5839</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/anuraaga/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/anuraaga">@ anuraaga</a></li> <li>feat(opentelemetry-configuration): add more attributes to config model <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5826" data-hovercard-type="issue" data-hovercard-url="/open-telemetry/opentelemetry-js/issues/5826/hovercard">#5826</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> <li>feat(opentelemetry-configuration): Parse of Configuration File <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5875" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5875/hovercard">#5875</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> <li>feat(opentelemetry-configuration): parse of array objects on configuration file <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5947" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5947/hovercard">#5947</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> <li>feat(opentelemetry-configuration): parse of environment variables on configuration file <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5947" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5947/hovercard">#5947</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li>fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/4788" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4788/hovercard">#4788</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/reberhardt7/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/reberhardt7">@ reberhardt7</a></li> <li>fix(otlp-transformer): trunc hrTime to int for nanos converting <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5924" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5924/hovercard">#5924</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/blumamir">@ blumamir</a></li> </ul> <h3>🏠 Internal</h3> <ul> <li>refactor(otlp-exporter-base): use get*FromEnv() for otlp exporter config. <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/5583" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5583/hovercard">#5583</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/weyert/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/weyert">@ weyert</a></li> </ul> </li> <li> <b>0.205.0</b> - <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.205.0">2025-09-10</a></br><h2>0.205.0</h2> <h3>💥 Breaking Changes</h3> <ul> <li>fix(otlp-exporter-base)!: split node and browser config types in two <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5917" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5917/hovercard">#5917</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/pichlermarc">@ pichlermarc</a> <ul> <li>Fixes a bug where Node.js modules would be incorrectly used in the instantiation of a web-targeted exporter</li> <li>Breaking changes: <ul> <li>(user-facing) <code>createOtlpHttpExportDelegate(OtlpHttpConfiguration)</code> has been changed to take a different, but identical type <code>OtlpNodeHttpConfiguration</code> to differentiate it from the web-targeted exporters</li> <li>(user-facing) <code>convertLegacyHttpOptions(...)</code> now returns <code>OtlpNodeHttpConfiguration</code>, the returned object's contents remain identical.</li> <li>(user-facing) <code>agentFactory</code> has been dropped from <code>OtlpHttpConfiguration</code> as it is node-specific and is now part of <code>OtlpNodeHttpConfiguration</code> instead</li> </ul> </li> </ul> </li> </ul> </li> <li> <b>0.204.0</b> - <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.204.0">2025-09-04</a></br><h2>0.204.0</h2> <h3>💥 Breaking Changes</h3> <ul> <li>feat(api-logs)!: Marked private methods as "conventionally private". <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5789" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5789/hovercard">#5789</a></li> <li>feat(exporter-otlp-*): support custom HTTP agents <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5719" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5719/hovercard">#5719</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/raphael-theriault-swi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/raphael-theriault-swi">@ raphael-theriault-swi</a> <ul> <li><code>OtlpHttpConfiguration.agentOptions</code> has been removed and functionality has been rolled into <code>OtlpHttpConfiguration.agentFactory</code> <ul> <li>(old) <code>{ agentOptions: myOptions }</code></li> <li>(new) <code>{ agentFactory: httpAgentFactoryFromOptions(myOptions) }</code></li> </ul> </li> </ul> </li> </ul> <h3>🚀 Features</h3> <ul> <li>feat(otlp-exporter-base): Add fetch transport for fetch-only environments like service workers. <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5807" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5807/hovercard">#5807</a> <ul> <li>when using headers, the Browser exporter now prefers <code>fetch</code> over <code>XMLHttpRequest</code> if present. Sending via <code>XMLHttpRequest</code> will be removed in a future release.</li> </ul> </li> <li>feat(opentelemetry-configuration): creation of basic ConfigProvider <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5809" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5809/hovercard">#5809</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> <li>feat(opentelemetry-configuration): creation of basic FileConfigProvider <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5863" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5863/hovercard">#5863</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/maryliag/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/maryliag">@ maryliag</a></li> <li>feat(sdk-node): Add support for multiple metric readers via the new <code>metricReaders</code> option in NodeSDK configuration. Users can now register multiple metric readers (e.g., Console, Prometheus) directly through the NodeSDK constructor. The old <code>metricReader</code> (singular) option is now deprecated and will show a warning if used, but remains supported for backward compatibility. Comprehensive tests and documentation have been added. <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/5760" data-hovercard-type="issue" data-hovercard-url="/open-telemetry/opentelemetry-js/issues/5760/hovercard">#5760</a> <ul> <li> <p><strong>Migration:</strong></p> <ul> <li> <p>Before:</p> <div class="highlight highlight-source-js notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="const sdk = new NodeSDK({ metricReader: myMetricReader });"><pre><span class="pl-k">const</span> <span class="pl-s1">sdk</span> <span class="pl-c1">=</span> <span class="pl-k">new</span> <span class="pl-v">NodeSDK</span><span class="pl-kos">(</span><span class="pl-kos">{</span> <span class="pl-c1">metricReader</span>: <span class="pl-s1">myMetricReader</span> <span class="pl-kos">}</span><span class="pl-kos">)</span><span class="pl-kos">;</span></pre></div> </li> <li> <p>After:</p> <div class="highlight highlight-source-js notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="const sdk = new NodeSDK({ metricReaders: [myMetricReader] });"><pre><span class="pl-k">const</span> <span class="pl-s1">sdk</span> <span class="pl-c1">=</span> <span class="pl-k">new</span> <span class="pl-v">NodeSDK</span><span class="pl-kos">(</span><span class="pl-kos">{</span> <span class="pl-c1">metricReaders</span>: <span class="pl-kos">[</span><span class="pl-s1">myMetricReader</span><span class="pl-kos">]</span> <span class="pl-kos">}</span><span class="pl-kos">)</span><span class="pl-kos">;</span></pre></div> </li> </ul> </li> <li> <p>Users should migrate to the new <code>metricReaders</code> array option for future compatibility. The old option will be removed in an upcoming experimental version.</p> </li> </ul> </li> <li>feat(instrumentation-http): Added support for redacting specific url query string values and url credentials <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5743" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5743/hovercard">#5743</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rads-1996/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/rads-1996">@ rads-1996</a></li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li>fix(otlp-exporter-base): prioritize <code>esnext</code> export condition as it is more specific <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5458" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5458/hovercard">#5458</a></li> <li>fix(otlp-exporter-base): consider relative urls as valid in browser environments <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5807" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5807/hovercard">#5807</a></li> <li>fix(instrumentation-fetch): Use ESM version of semconv instead of CJS. Users expecting mixed ESM and CJS modules will now only get ESM modules. <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5878" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5878/hovercard">#5878</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/overbalance/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/overbalance">@ overbalance</a></li> </ul> <h3>🏠 Internal</h3> <ul> <li>refactor(otlp-exporter-base): use getStringFromEnv instead of process.env <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5594" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5594/hovercard">#5594</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/weyert/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/weyert">@ weyert</a></li> <li>chore(sdk-logs): refactored imports <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5801" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5801/hovercard">#5801</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/svetlanabrennan/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/svetlanabrennan">@ svetlanabrennan</a></li> <li>refactor(instrumentation-grpc): updated path to semconv <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/5884" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/5884/hovercard">#5884</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/overbalance/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/overbalance">@ overbalance</a></li> </ul> </li> <li> <b>0.203.0</b> - 2025-07-09 </li> <li> <b>0.202.0</b> - 2025-06-02 </li> <li> <b>0.201.1</b> - 2025-05-19 </li> <li> <b>0.201.0</b> - 2025-05-15 </li> <li> <b>0.200.0</b> - 2025-03-17 </li> <li> <b>0.200.0-rc.1</b> - 2025-03-12 </li> <li> <b>0.200.0-dev.1</b> - 2025-03-05 </li> <li> <b>0.200.0-dev.0</b> - 2025-02-24 </li> <li> <b>0.57.2</b> - 2025-02-13 </li> <li> <b>0.57.1</b> - 2025-01-14 </li> <li> <b>0.57.0</b> - 2024-12-18 </li> <li> <b>0.56.0</b> - 2024-12-04 </li> <li> <b>0.55.0</b> - 2024-11-18 </li> <li> <b>0.54.2</b> - 2024-11-07 </li> <li> <b>0.54.1</b> - 2024-11-05 </li> <li> <b>0.54.0</b> - 2024-10-23 </li> <li> <b>0.53.0</b> - 2024-08-28 </li> <li> <b>0.52.1</b> - 2024-06-20 </li> </ul> from <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/releases">@opentelemetry/exporter-metrics-otlp-proto GitHub release notes</a> </details> </details> --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs._ **For more information:** <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJiZWVjMmI5NC0yODVhLTRhMDctODliMi0yMDQ3NjM5MDE3MDUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImJlZWMyYjk0LTI4NWEtNGEwNy04OWIyLTIwNDc2MzkwMTcwNSJ9fQ==" width="0" height="0"/> > - 🧐 [View latest project report](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/f6446ec8-d441-487e-b58f-38373430e213?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/f6446ec8-d441-487e-b58f-38373430e213/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/f6446ec8-d441-487e-b58f-38373430e213/settings/integration?pkg&#x3D;@opentelemetry/exporter-metrics-otlp-proto&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades) [//]: # 'snyk:metadata:{"breakingChangeRiskLevel":null,"FF_showPullRequestBreakingChanges":false,"FF_showPullRequestBreakingChangesWebSearch":false,"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@opentelemetry/exporter-metrics-otlp-proto","from":"0.52.1","to":"0.207.0"}],"env":"prod","hasFixes":false,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[],"prId":"beec2b94-285a-4a07-89b2-204763901705","prPublicId":"beec2b94-285a-4a07-89b2-204763901705","packageManager":"npm","priorityScoreList":[],"projectPublicId":"f6446ec8-d441-487e-b58f-38373430e213","projectUrl":"https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/f6446ec8-d441-487e-b58f-38373430e213?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":21,"publishedDate":"2025-10-21T13:21:23.077Z"},"vulns":[]}'
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/oneuptime#283