Bump the all-dependencies group across 1 directory with 24 updates by dependabot[bot] · Pull Request #1504 · NHSDigital/nbs-appointments-management-service

dependabot · 2026-03-11T13:15:30Z

Bumps the all-dependencies group with 23 updates in the /src/client directory:

Package	From	To
@microsoft/applicationinsights-web	`3.3.10`	`3.3.11`
@opentelemetry/api-logs	`0.206.0`	`0.213.0`
@opentelemetry/exporter-logs-otlp-http	`0.206.0`	`0.213.0`
@opentelemetry/exporter-metrics-otlp-http	`0.206.0`	`0.213.0`
@opentelemetry/instrumentation	`0.206.0`	`0.213.0`
@opentelemetry/sdk-logs	`0.206.0`	`0.213.0`
@vercel/otel	`2.0.1`	`2.1.1`
dayjs	`1.11.18`	`1.11.19`
react-hook-form	`7.63.0`	`7.71.2`
@azure/cosmos	`4.5.1`	`4.9.1`
@playwright/test	`1.55.1`	`1.58.2`
@testing-library/jest-dom	`6.8.0`	`6.9.1`
@testing-library/react	`16.3.0`	`16.3.2`
@types/node	`22.19.1`	`22.19.15`
eslint-config-next	`14.2.33`	`14.2.35`
jest	`30.2.0`	`30.3.0`
jest-environment-jsdom	`30.2.0`	`30.3.0`
jest-fixed-jsdom	`0.0.10`	`0.0.11`
postcss	`8.5.6`	`8.5.8`
prettier	`3.6.2`	`3.8.1`
rimraf	`6.1.2`	`6.1.3`
sass	`1.93.2`	`1.98.0`
typescript	`5.9.2`	`5.9.3`

Updates @microsoft/applicationinsights-web from 3.3.10 to 3.3.11

Release notes

Sourced from @microsoft/applicationinsights-web's releases.

3.3.11

Changelog

#2642 Separate BeaconSendFailure and BeaconSendFailure from SizeLimitExceeded

#2675 Fix offline channel recovery for Offline -> Online (#2674)

#2666 Fix unload() to return promise when called without parameters

#2667 Add a check to prevent non-string URLs from being passed to fieldRedaction method

Infrastructure changes

#2684 Fix minor issue with E2E test

#2681 Add redact URL configuration in readme

#2676 Fix Flakey Ajax test which has race condition

#2670 Fix static web CDN test assertion (Fixes failing CI tests)

What's Changed

[Main][Task] 35656109: [Snippet] Fix Snippet Loader Error by @Karlie-777 in microsoft/ApplicationInsights-JS#2659

@microsoft/applicationinsights-web-snippet 1.2.3 release by @hectorhdzg in microsoft/ApplicationInsights-JS#2662

Fix static web CDN test assertion (Fixes failing CI tests) by @rads-1996 in microsoft/ApplicationInsights-JS#2670

Add a check to prevent non-string URLs from being passed to fieldRedaction method by @rads-1996 in microsoft/ApplicationInsights-JS#2667

Fix offline channel recovery for Offline -> Online (#2674) by @peitschie in microsoft/ApplicationInsights-JS#2675

Fix unload() to return promise when called without parameters by @Copilot in microsoft/ApplicationInsights-JS#2666

Fix Flakey Ajax test which has race condition by @MSNev in microsoft/ApplicationInsights-JS#2676

Separate BeaconSendFailure and BeaconSendFailure from SizeLimitExceeded by @rggammon in microsoft/ApplicationInsights-JS#2642

Add redact URL configuration in readme by @hectorhdzg in microsoft/ApplicationInsights-JS#2681

Fix minor issue with E2E test by @MSNev in microsoft/ApplicationInsights-JS#2684

[Release] Increase version to 3.3.11 by @MSNev in microsoft/ApplicationInsights-JS#2687

New Contributors

@rggammon made their first contribution in microsoft/ApplicationInsights-JS#2642

Full Changelog: microsoft/ApplicationInsights-JS@3.3.10...3.3.11

Changelog

Sourced from @microsoft/applicationinsights-web's changelog.

3.3.11 (January 12th, 2026)

Changelog

#2642 Separate BeaconSendFailure and BeaconSendFailure from SizeLimitExceeded

#2675 Fix offline channel recovery for Offline -> Online (#2674)

#2666 Fix unload() to return promise when called without parameters

#2667 Add a check to prevent non-string URLs from being passed to fieldRedaction method

Infrastructure changes

#2684 Fix minor issue with E2E test

#2681 Add redact URL configuration in readme

#2676 Fix Flakey Ajax test which has race condition

#2670 Fix static web CDN test assertion (Fixes failing CI tests)

Web snippet 1.2.3 (November 10, 2025)

#2659 [Web-Snippet] [BUG] @microsoft/applicationinsights-web-snippet Fix Snippet Loader Error

Commits

39ed6cd [Release] Increase version to 3.3.11 (#2687)
c46c683 Fix minor issue with E2E test (#2684)
c75a5a2 Add redact URL configuration in readme (#2681)
7d7e906 Separate BeaconSendFailure and BeaconSendFailure from SizeLimitExceeded (#2642)
6ef6d33 Fix Flakey Ajax test which has race condition (#2676)
9201907 Fix unload() to return promise when called without parameters (#2666)
76d20b9 Fix offline channel recovery for Offline -> Online (#2674) (#2675)
223d8c2 Add a check to prevent non-string URLs from being passed to fieldRedaction me...
a9c0b89 Fix static web CDN test assertion (Fixes failing CI tests) (#2670)
bc59111 @microsoft/applicationinsights-web-snippet 1.2.3 release (#2662)
Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.206.0 to 0.213.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @trentm

🚀 Features

feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @vitorvasc

🐛 Bug Fixes

fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @trentm

fix(otlp-exporter-base): handle response error #6412 @pichlermarc

Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.

fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @overbalance

(user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version

fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @vitorvasc

fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @overbalance @imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

... (truncated)

Commits

541e1b4 chore: prepare next release (#6464)
30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
ae30abf chore(deps): update dependency @types/jquery to v4 (#6456)
6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
65c9d9f docs: fix changelog PR number typo (#6453)
3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-http from 0.206.0 to 0.213.0

Release notes

Sourced from @opentelemetry/exporter-logs-otlp-http's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @trentm

🚀 Features

feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @vitorvasc

🐛 Bug Fixes

fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @trentm

fix(otlp-exporter-base): handle response error #6412 @pichlermarc

Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.

fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @overbalance

(user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version

fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @vitorvasc

fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @overbalance @imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

... (truncated)

Commits

541e1b4 chore: prepare next release (#6464)
30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
ae30abf chore(deps): update dependency @types/jquery to v4 (#6456)
6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
65c9d9f docs: fix changelog PR number typo (#6453)
3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-http from 0.206.0 to 0.213.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-http's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @trentm

🚀 Features

feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @vitorvasc

🐛 Bug Fixes

fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @trentm

fix(otlp-exporter-base): handle response error #6412 @pichlermarc

Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.

fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @overbalance

(user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version

fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @vitorvasc

fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @overbalance @imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

... (truncated)

Commits

541e1b4 chore: prepare next release (#6464)
30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
ae30abf chore(deps): update dependency @types/jquery to v4 (#6456)
6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
65c9d9f docs: fix changelog PR number typo (#6453)
3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.206.0 to 0.213.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @trentm

🚀 Features

feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @vitorvasc

🐛 Bug Fixes

fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @trentm

fix(otlp-exporter-base): handle response error #6412 @pichlermarc

Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.

fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @overbalance

(user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version

fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @vitorvasc

fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @overbalance @imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

... (truncated)

Commits

541e1b4 chore: prepare next release (#6464)
30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
ae30abf chore(deps): update dependency @types/jquery to v4 (#6456)
6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
65c9d9f docs: fix changelog PR number typo (#6453)
3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.206.0 to 0.213.0

Release notes

Sourced from @opentelemetry/sdk-logs's releases.

experimental/v0.213.0

0.213.0

💥 Breaking Changes

fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type #6451 @trentm

🚀 Features

feat(instrumentation-http): provide http.request.header.<key> at server span creation time #6396 @vitorvasc

🐛 Bug Fixes

fix(instrumentation-http): guard against double-instrumentation if loaded with require('http') and import 'http' #6428 @trentm

fix(otlp-exporter-base): handle response error #6412 @pichlermarc

Fixes a bug where when the response header was received, but the connection was reset by the server, an unhandled error would be thrown.

fix(otlp-exporter-base): remove sendBeacon in favor of fetch with keepalive #6391 @overbalance

(user-facing) createOtlpSendBeaconExportDelegate will be removed in a future version

fix(otlp-transformer): downgrade protobufjs to version ^7.0.0 #6418 @vitorvasc

fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders #6341 @overbalance @imadha

experimental/v0.212.0

0.212.0

💥 Breaking Changes

feat(sdk-logs)!: move environment variable configuration to @opentelemetry/sdk-node #6325 @pichlermarc

(user-facing): environment variable configuration is no longer applied automatically when instantiating SDK components (LoggerProvider, BatchLogRecordProcessor) directly from @opentelemetry/sdk-logs. Please migrate to using NodeSDK from @opentelemetry/sdk-node to get automatic environment variable configuration.

🚀 Features

feat(configuration): add Prometheus exporter support #6400 @MikeGoldsmith

feat(sampler-composite): add ComposableAnnotatingSampler and ComposableRuleBasedSampler #6305 @trentm

feat(configuration): parse config for rc 3 #6304 @maryliag

feat(instrumentation): use the internals: true option with import-in-the-middle hook, allowing instrumentations to hook internal files in ES modules #6344 @trentm

🐛 Bug Fixes

fix(configuration): remove default propagator initialization #6399 @MikeGoldsmith

fix(instrumentation-fetch): preserve Response.url, type, and redirected properties #6243 @AnubhavPurohit691

The fetch instrumentation now preserves the read-only url, type, and redirected properties from the original Response object when wrapping it with a Proxy. This fixes issues where code relying on these properties (e.g., CORS type detection) would fail with instrumented fetch.

fix(exporter-prometheus): add missing @opentelemetry/semantic-conventions dependency #6330 @omizha

fix(otlp-transformer): correctly handle Uint8Array attribute values when serializing to JSON #6348 @pichlermarc

fix(otlp-exporter-base): fix unwanted instrumentation of the fetch exports when context is not propagated #6353 @david-luna

🏠 Internal

... (truncated)

Commits

541e1b4 chore: prepare next release (#6464)
30f94fe feat(instrumentation-http): provide http.request.header.\<key> at server spa...
2ac44ad refactor(context-zone-peer-dep): remove unnecessary helper methods and use me...
600e51d chore(deps): update github/codeql-action digest to c793b71 (#6458)
ae30abf chore(deps): update dependency @types/jquery to v4 (#6456)
6387d3c chore(release): use the HEAD commit as the target for draft GH release creati...
4cd3644 fix(deps): update dependency import-in-the-middle to v3 (#6403)
65c9d9f docs: fix changelog PR number typo (#6453)
3db56ba fix(api-logs)!: drop lingering includeTraceContext from LoggerOptions type (#...
dcbead5 fix(instrumentation-fetch): handle HeadersInit tuple arrays in _addHeaders (#...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-metrics from 2.1.0 to 2.6.0

Release notes

Sourced from @opentelemetry/sdk-metrics's releases.

v2.6.0

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

🐛 Bug Fixes

fix(sdk-trace-web): propagate optimised flag in getElementXPath recursion #6335 @akkupratap323

v2.5.1

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @overbalance

test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @overbalance

fix(example-web): update Docker config and deps for collector #6342 @overbalance

perf(sdk-trace-base): optimize setAttribute performance #6283 @AbhiPrasad

refactor(core): remove unnecessary closure in _export() #6360 @cjihrig

v2.5.0

2.5.0

🐛 Bug Fixes

refactor(resources): use runtime check for default service name #6257 @overbalance

🏠 Internal

chore(context-async-hooks): Deprecate AsyncHooksContextManager #6298 @trentm

chore: fix CODEOWNERS rule ordering #6297 @overbalance

fix(github): fix CODEOWNERS browser package paths #6303 @overbalance

fix(build): update @types/node to 18.19.130, remove DOM types from base tsconfig #6280 @overbalance

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-metrics's changelog.

2.6.0

💥 Breaking Changes

fix(resources): update OTEL_RESOURCE_ATTRIBUTESopen-telemetry/opentelemetry-specification#4856#6261 @jacksonweber

Important: This fix is included in the "breaking changes" section because it can be breaking for some edge case usage of OTEL_RESOURCE_ATTRIBUTES:

export OTEL_RESOURCE_ATTRIBUTES=foo=bar,spam will now be fully ignored, because the spam entry is invalid (missing =). Per spec, any parsing error results in ignoring the entire environment variable.

export OTEL_RESOURCE_ATTRIBUTES='wat=" spaces "' will now result in {"wat": "\" spaces \""} with the double-quotes included in the value. Before this change the implementation included brittle double-quoting to allow leading and trailing whitespace in the value. To support leading or trailing whitespace now, you must percent-encode the whitespace. Internal whitespace still works without encoding, e.g. export OTEL_RESOURCE_ATTRIBUTES='green=eggs and ham'.

🚀 Features

feat(sdk-trace): implement span start/end metrics #6213 @anuraaga

🐛 Bug Fixes

fix(sdk-trace-base): enforce StatusCode precedence rules in setStatus per specification #6461 @newbee1939

fix(sdk-trace-web): propagate optimised flag in getElementXPath recursion #6335 @akkupratap323

2.5.1

🐛 Bug Fixes

fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @maryliag

🏠 Internal

perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 ...
Description has been truncated

Bumps the all-dependencies group with 23 updates in the /src/client directory: | Package | From | To | | --- | --- | --- | | [@microsoft/applicationinsights-web](https://github.com/microsoft/ApplicationInsights-JS) | `3.3.10` | `3.3.11` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.206.0` | `0.213.0` | | [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.206.0` | `0.213.0` | | [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.206.0` | `0.213.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.206.0` | `0.213.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.206.0` | `0.213.0` | | [@vercel/otel](https://github.com/vercel/otel) | `2.0.1` | `2.1.1` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.18` | `1.11.19` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.63.0` | `7.71.2` | | [@azure/cosmos](https://github.com/Azure/azure-sdk-for-js) | `4.5.1` | `4.9.1` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.55.1` | `1.58.2` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.8.0` | `6.9.1` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `22.19.15` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `14.2.33` | `14.2.35` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` | | [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `30.2.0` | `30.3.0` | | [jest-fixed-jsdom](https://github.com/mswjs/jest-fixed-jsdom) | `0.0.10` | `0.0.11` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [rimraf](https://github.com/isaacs/rimraf) | `6.1.2` | `6.1.3` | | [sass](https://github.com/sass/dart-sass) | `1.93.2` | `1.98.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` | Updates `@microsoft/applicationinsights-web` from 3.3.10 to 3.3.11 - [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases) - [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md) - [Commits](microsoft/ApplicationInsights-JS@3.3.10...3.3.11) Updates `@opentelemetry/api-logs` from 0.206.0 to 0.213.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.206.0...experimental/v0.213.0) Updates `@opentelemetry/exporter-logs-otlp-http` from 0.206.0 to 0.213.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.206.0...experimental/v0.213.0) Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.206.0 to 0.213.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.206.0...experimental/v0.213.0) Updates `@opentelemetry/instrumentation` from 0.206.0 to 0.213.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.206.0...experimental/v0.213.0) Updates `@opentelemetry/sdk-logs` from 0.206.0 to 0.213.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.206.0...experimental/v0.213.0) Updates `@opentelemetry/sdk-metrics` from 2.1.0 to 2.6.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.1.0...v2.6.0) Updates `@vercel/otel` from 2.0.1 to 2.1.1 - [Release notes](https://github.com/vercel/otel/releases) - [Commits](https://github.com/vercel/otel/compare/@vercel/otel@2.0.1...@vercel/otel@2.1.1) Updates `dayjs` from 1.11.18 to 1.11.19 - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.18...v1.11.19) Updates `react-hook-form` from 7.63.0 to 7.71.2 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.63.0...v7.71.2) Updates `@azure/cosmos` from 4.5.1 to 4.9.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/cosmos_4.5.1...@azure/cosmos_4.9.1) Updates `@playwright/test` from 1.55.1 to 1.58.2 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.55.1...v1.58.2) Updates `@testing-library/jest-dom` from 6.8.0 to 6.9.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.8.0...v6.9.1) Updates `@testing-library/react` from 16.3.0 to 16.3.2 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.0...v16.3.2) Updates `@types/node` from 22.19.1 to 22.19.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-config-next` from 14.2.33 to 14.2.35 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v14.2.35/packages/eslint-config-next) Updates `jest` from 30.2.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest) Updates `jest-environment-jsdom` from 30.2.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest-environment-jsdom) Updates `jest-fixed-jsdom` from 0.0.10 to 0.0.11 - [Release notes](https://github.com/mswjs/jest-fixed-jsdom/releases) - [Commits](mswjs/jest-fixed-jsdom@v0.0.10...v0.0.11) Updates `postcss` from 8.5.6 to 8.5.8 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.8) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `rimraf` from 6.1.2 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.1.2...v6.1.3) Updates `sass` from 1.93.2 to 1.98.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.93.2...1.98.0) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) --- updated-dependencies: - dependency-name: "@microsoft/applicationinsights-web" dependency-version: 3.3.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@opentelemetry/exporter-logs-otlp-http" dependency-version: 0.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-http" dependency-version: 0.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@vercel/otel" dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: dayjs dependency-version: 1.11.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: react-hook-form dependency-version: 7.71.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@azure/cosmos" dependency-version: 4.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@playwright/test" dependency-version: 1.58.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@testing-library/jest-dom" dependency-version: 6.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@testing-library/react" dependency-version: 16.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@types/node" dependency-version: 22.19.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: eslint-config-next dependency-version: 14.2.35 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: jest dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: jest-environment-jsdom dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: jest-fixed-jsdom dependency-version: 0.0.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: postcss dependency-version: 8.5.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: sass dependency-version: 1.98.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-03-16T04:54:19Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 11, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/src/client/all-dependencies-4d9ad2f959 branch from 39a9126 to c86025a Compare March 13, 2026 04:47

dependabot bot force-pushed the dependabot/npm_and_yarn/src/client/all-dependencies-4d9ad2f959 branch from c86025a to c43ff1d Compare March 16, 2026 04:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-dependencies group across 1 directory with 24 updates#1504

Bump the all-dependencies group across 1 directory with 24 updates#1504
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/src/client/all-dependencies-4d9ad2f959

dependabot bot commented on behalf of github Mar 11, 2026 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.3.11

Changelog

Infrastructure changes

What's Changed

New Contributors

3.3.11 (January 12th, 2026)

Changelog

Infrastructure changes

Web snippet 1.2.3 (November 10, 2025)

experimental/v0.213.0

0.213.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.213.0

0.213.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.213.0

0.213.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.213.0

0.213.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.213.0

0.213.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

experimental/v0.212.0

0.212.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

🏠 Internal

v2.6.0

2.6.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v2.5.1

2.5.1

🐛 Bug Fixes

🏠 Internal

v2.5.0

2.5.0

🐛 Bug Fixes

🏠 Internal

dependabot bot commented on behalf of github Mar 11, 2026 •

edited

Loading