[Snyk] Upgrade @opentelemetry/instrumentation-fetch from 0.52.0 to 0.52.1 #781

Closed
opened 2026-04-05 16:22:58 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @simlarsen on 7/26/2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @opentelemetry/instrumentation-fetch from 0.52.0 to 0.52.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on a month ago.

Release notes
Package name: @opentelemetry/instrumentation-fetch
  • 0.52.1 - 2024-06-20

    0.52.1

    🚀 (Enhancement)

    • refactor(instrumentation-fetch): move fetch to use SEMATRR #4632
    • refactor(otlp-transformer): use explicit exports #4785 @ pichlermarc

    🐛 (Bug Fix)

    🏠 (Internal)

    • test: add npm run maint:regenerate-test-certs maintenance script and regenerate recently expired test certs #4777
  • 0.52.0 - 2024-06-05

    0.52.0

    💥 Breaking Change

    • feat(exporter--otlp-)!: move serialization for Node.js exporters to @ opentelemetry/otlp-transformer #4542 @ pichlermarc
      • Breaking changes:
        • (user-facing) convert() now returns an empty object and will be removed in a follow-up
        • (internal) OTLPExporterNodeBase now has additional constructor parameters that are required
        • (internal) OTLPExporterNodeBase now has an additional ResponseType type parameter
    • feat(exporter--otlp-)!: move serialization for Node.js exporters to @ opentelemetry/otlp-transformer #4581 @ pichlermarc
      • Breaking changes:
        • (user-facing) convert() has been removed from all exporters
        • (internal) OTLPExporterBrowserBase: RequestType has been replaced by a ResponseType type-argument
        • (internal) OTLPExporterNodeBase: ServiceRequest has been replaced by a ServiceResponse type-argument
        • (internal) the @ opentelemetry/otlp-exporter-proto-base package has been removed, and will from now on be deprecated in npm
    • feat(instrumentation): remove default value for config in base instrumentation constructor #4695: @ blumamir
    • fix(instrumentation)!: remove unused supportedVersions from Instrumentation interface #4694 @ blumamir
    • feat(instrumentation)!: simplify registerInstrumentations() API
      • Breaking changes:
        • removes InstrumentationOptions type
        • occurrences of InstrumentationOptions are now replaced by (Instrumentation | Instrumentation[])[]
          • migrate usages of registerInstrumentations({instrumentations: fooInstrumentation}) to registerInstrumentations({instrumentations: [fooInstrumentation]})
          • passing Instrumentation classes to registerInstrumentations() is now not possible anymore.
    • feat(sdk-node)!: simplify type of instrumentations option
      • Breaking changes:
        • replaces InstrumentationOptions with (Instrumentation | Instrumentation[])[]

    🚀 (Enhancement)

    • feat(instrumentation): apply unwrap before wrap in base class #4692
    • feat(instrumentation): add util to execute span customization hook in base class #4663 @ blumamir
    • feat(instrumentation): generic config type in instrumentation base #4659 @ blumamir
    • feat: support node 22 #4666 @ dyladan
    • feat(propagator-aws-xray-lambda): add AWS Xray Lambda propagator 4554
    • refactor(instrumentation-xml-http-request): use exported strings for semantic attributes. #4681

    🐛 (Bug Fix)

    📚 (Refine Doc)

    • docs(instrumentation): better docs for supportedVersions option #4693 @ blumamir
    • docs: align all supported versions to a common format #4696 @ blumamir
    • refactor(examples): use new exported string constants for semconv in experimental/examples/opencensus-shim #4763 @ Zen-cronic
from @opentelemetry/instrumentation-fetch GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

*Originally created by @simlarsen on 7/26/2024* <p>This PR was automatically created by Snyk using the credentials of a real user.</p><br />![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123) <h3>Snyk has created this PR to upgrade @opentelemetry/instrumentation-fetch from 0.52.0 to 0.52.1.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **1 version** ahead of your current version. - The recommended version was released on **a month ago**. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@opentelemetry/instrumentation-fetch</b></summary> <ul> <li> <b>0.52.1</b> - <a href="https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.52.1">2024-06-20</a></br><h2>0.52.1</h2> <h3>🚀 (Enhancement)</h3> <ul> <li>refactor(instrumentation-fetch): move fetch to use SEMATRR <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4632" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4632/hovercard">#4632</a></li> <li>refactor(otlp-transformer): use explicit exports <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4785" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4785/hovercard">#4785</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pichlermarc">@ pichlermarc</a></li> </ul> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(sdk-node): register context manager if no tracer options are provided <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4781" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4781/hovercard">#4781</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pichlermarc">@ pichlermarc</a></li> <li>fix(instrumentation): Update <code>import-in-the-middle</code> to fix <a href="https://github.com/DataDog/import-in-the-middle/releases/tag/v1.8.1">numerous bugs</a> <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4806" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4806/hovercard">#4806</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/timfish/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/timfish">@ timfish</a></li> <li>chore(instrumentation): Use a caret version for <code>import-in-the-middle</code> dependency <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4810" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4810/hovercard">#4810</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/timfish/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/timfish">@ timfish</a></li> </ul> <h3>🏠 (Internal)</h3> <ul> <li>test: add <code>npm run maint:regenerate-test-certs</code> maintenance script and regenerate recently expired test certs <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4777" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4777/hovercard">#4777</a></li> </ul> </li> <li> <b>0.52.0</b> - <a href="https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.52.0">2024-06-05</a></br><h2>0.52.0</h2> <h3>💥 Breaking Change</h3> <ul> <li>feat(exporter-<em>-otlp-</em>)!: move serialization for Node.js exporters to <code>@ opentelemetry/otlp-transformer</code> <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4542" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4542/hovercard">#4542</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pichlermarc">@ pichlermarc</a> <ul> <li>Breaking changes: <ul> <li>(user-facing) <code>convert()</code> now returns an empty object and will be removed in a follow-up</li> <li>(internal) OTLPExporterNodeBase now has additional constructor parameters that are required</li> <li>(internal) OTLPExporterNodeBase now has an additional <code>ResponseType</code> type parameter</li> </ul> </li> </ul> </li> <li>feat(exporter-<em>-otlp-</em>)!: move serialization for Node.js exporters to <code>@ opentelemetry/otlp-transformer</code> <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4581" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4581/hovercard">#4581</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/pichlermarc/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/pichlermarc">@ pichlermarc</a> <ul> <li>Breaking changes: <ul> <li>(user-facing) <code>convert()</code> has been removed from all exporters</li> <li>(internal) OTLPExporterBrowserBase: <code>RequestType</code> has been replaced by a <code>ResponseType</code> type-argument</li> <li>(internal) OTLPExporterNodeBase: <code>ServiceRequest</code> has been replaced by a <code>ServiceResponse</code> type-argument</li> <li>(internal) the <code>@ opentelemetry/otlp-exporter-proto-base</code> package has been removed, and will from now on be deprecated in <code>npm</code></li> </ul> </li> </ul> </li> <li>feat(instrumentation): remove default value for config in base instrumentation constructor <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4695" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4695/hovercard">#4695</a>: <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>fix(instrumentation)!: remove unused supportedVersions from Instrumentation interface <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4694" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4694/hovercard">#4694</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>feat(instrumentation)!: simplify <code>registerInstrumentations()</code> API <ul> <li>Breaking changes: <ul> <li>removes <code>InstrumentationOptions</code> type</li> <li>occurrences of <code>InstrumentationOptions</code> are now replaced by <code>(Instrumentation | Instrumentation[])[]</code> <ul> <li>migrate usages of <code>registerInstrumentations({instrumentations: fooInstrumentation})</code> to <code>registerInstrumentations({instrumentations: [fooInstrumentation]})</code></li> <li>passing Instrumentation classes to <code>registerInstrumentations()</code> is now not possible anymore.</li> </ul> </li> </ul> </li> </ul> </li> <li>feat(sdk-node)!: simplify type of <code>instrumentations</code> option <ul> <li>Breaking changes: <ul> <li>replaces <code>InstrumentationOptions</code> with <code>(Instrumentation | Instrumentation[])[]</code></li> </ul> </li> </ul> </li> </ul> <h3>🚀 (Enhancement)</h3> <ul> <li>feat(instrumentation): apply unwrap before wrap in base class <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4692" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4692/hovercard">#4692</a></li> <li>feat(instrumentation): add util to execute span customization hook in base class <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4663" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4663/hovercard">#4663</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>feat(instrumentation): generic config type in instrumentation base <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4659" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4659/hovercard">#4659</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>feat: support node 22 <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4666" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4666/hovercard">#4666</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/dyladan/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dyladan">@ dyladan</a></li> <li>feat(propagator-aws-xray-lambda): add AWS Xray Lambda propagator <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4554" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4554/hovercard">4554</a></li> <li>refactor(instrumentation-xml-http-request): use exported strings for semantic attributes. <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4681/files">#4681</a></li> </ul> <h3>🐛 (Bug Fix)</h3> <ul> <li>fix(instrumentation): Update <code>import-in-the-middle</code> to fix <a href="https://github.com/DataDog/import-in-the-middle/pull/91" data-hovercard-type="pull_request" data-hovercard-url="/nodejs/import-in-the-middle/pull/91/hovercard">numerous bugs</a> <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4745" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4745/hovercard">#4745</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/timfish/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/timfish">@ timfish</a></li> </ul> <h3>📚 (Refine Doc)</h3> <ul> <li>docs(instrumentation): better docs for supportedVersions option <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4693" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4693/hovercard">#4693</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>docs: align all supported versions to a common format <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4696" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4696/hovercard">#4696</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/blumamir/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/blumamir">@ blumamir</a></li> <li>refactor(examples): use new exported string constants for semconv in experimental/examples/opencensus-shim <a href="https://github.com/open-telemetry/opentelemetry-js/pull/4763#pull" data-hovercard-type="pull_request" data-hovercard-url="/open-telemetry/opentelemetry-js/pull/4763/hovercard">#4763</a> <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Zen-cronic/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Zen-cronic">@ Zen-cronic</a></li> </ul> </li> </ul> from <a href="https://github.com/open-telemetry/opentelemetry-js/releases">@opentelemetry/instrumentation-fetch GitHub release notes</a> </details> </details> --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs._ **For more information:** <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI3ODI2YTY0ZS1iY2UzLTRkMWQtYWM5MC03NDZkMDMwZjc4NWQiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6Ijc4MjZhNjRlLWJjZTMtNGQxZC1hYzkwLTc0NmQwMzBmNzg1ZCJ9fQ==" width="0" height="0"/> > - 🧐 [View latest project report](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0/settings/integration?pkg&#x3D;&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"","from":"opentelemetry/instrumentation-fetch","to":"opentelemetry/instrumentation-fetch"}],"env":"prod","hasFixes":false,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[],"prId":"7826a64e-bce3-4d1d-ac90-746d030f785d","prPublicId":"7826a64e-bce3-4d1d-ac90-746d030f785d","packageManager":"npm","priorityScoreList":[],"projectPublicId":"47001ef1-7b3a-49c2-88cd-8025c56346d0","projectUrl":"https://app.snyk.io/org/oneuptime-RsC2nshvQ2Vnr35jHvMnMP/project/47001ef1-7b3a-49c2-88cd-8025c56346d0?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2024-06-20T09:19:46.993Z"},"vulns":[]}) --->
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/oneuptime#781