storm-software / storm-stack

⚡The Storm Stack monorepo contains utility applications, tools, and various libraries to create modern and scalable web applications.
Apache License 2.0
4 stars 0 forks source link

chore(deps): Bump @opentelemetry/otlp-exporter-base from 0.46.0 to 0.48.0 #32

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 8 months ago

Bumps @opentelemetry/otlp-exporter-base from 0.46.0 to 0.48.0.

Release notes

Sourced from @​opentelemetry/otlp-exporter-base's releases.

Experimental v0.48.0

0.48.0

:boom: Breaking Change

  • fix(instrumentation)!: pin import-in-the-middle@1.7.1 #4441
    • Fixes a bug where, in some circumstances, ESM instrumentation packages would try to instrument CJS exports on ESM, causing the end-user application to crash.
    • This breaking change only affects users that are using the experimental @opentelemetry/instrumentation/hook.mjs loader hook AND Node.js 18.19 or later:
      • This reverts back to an older version of import-in-the-middle due to DataDog/import-in-the-middle#57
      • This version does not support Node.js 18.19 or later

:bug: (Bug Fix)

  • fix(exporter-prometheus): avoid invoking callback synchronously #4431 @​legendecas
  • fix(exporter-logs-otlp-grpc): set User-Agent header #4398 @​Vunovati
  • fix(exporter-logs-otlp-http): set User-Agent header #4398 @​Vunovati
  • fix(exporter-logs-otlp-proto): set User-Agent header #4398 @​Vunovati
  • fix(instrumentation-fetch): compatibility with Map types for fetch headers

:house: (Internal)

Experimental v0.47.0

0.47.0

:rocket: (Enhancement)

  • perf(otlp-transformer): skip unnecessary base64 encode of span contexts #4343 @​seemk

:boom: Breaking Change

  • fix(exporter-logs-otlp-http)!: programmatic headers take precedence over environment variables #2370 @​Vunovati
  • fix(exporter-logs-otlp-proto)!: programmatic headers take precedence over environment variables #2370 @​Vunovati
  • fix(exporter-trace-otlp-http)!: programmatic headers take precedence over environment variables #2370 @​Vunovati
  • fix(exporter-trace-otlp-proto)!: programmatic headers take precedence over environment variables #2370 @​Vunovati

:bug: (Bug Fix)

  • fix(instrumentation): use caret range on import-in-the-middle #4380 @​pichlermarc
  • fix(instrumentation): do not import 'path' in browser runtimes #4386 @​pichlermarc
    • Fixes a bug where bundling for web would fail due to InstrumentationNodeModuleDefinition importing path
Commits
  • 828f2ed chore: prepare release 1.21.0/0.48.0 (#4442)
  • 3711990 fix(instrumentation-fetch): compatibility with Map inputs for request headers...
  • 5afbcdb docs: add observableGauge to the prometheus experimental example (#4267)
  • bf4d553 refactor(exporter-prometheus): promisify prometheus tests (#4431)
  • df63272 fix(exporter-logs-otlp-*): set User-Agent header (#4398)
  • 8648313 fix(instrumentation)!: pin import-in-the-middle@1.7.1 (#4441)
  • 0635ab1 fix(sdk-trace-base): Export processed spans while exporter failed (#4287)
  • 0f6518d feat(sdk-metrics): deprecate MeterProvider.addMetricReader() in favor of 'rea...
  • 43e598e test: transpile zone.js products in test (#4423)
  • 2a3c264 refactor(core): drop unnecessary assignment of HOSTNAME (#4421)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
github-actions[bot] commented 8 months ago

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

socket-security[bot] commented 8 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@opentelemetry/otlp-exporter-base@0.48.0 Transitive: environment, unsafe +3 2.92 MB bogdandrutu, dyladan, pichlermarc

🚮 Removed packages: npm/@opentelemetry/otlp-exporter-base@0.46.0

View full report↗︎

dependabot[bot] commented 7 months ago

Superseded by #53.