Skip to content

chore(deps): bump @opentelemetry/resources from 1.30.1 to 2.7.1 - #312

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/opentelemetry/resources-2.7.0
Closed

chore(deps): bump @opentelemetry/resources from 1.30.1 to 2.7.1#312
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/opentelemetry/resources-2.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited by cursor Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps @opentelemetry/resources from 1.30.1 to 2.7.1.

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.7.1

2.7.1

🐛 Bug Fixes

  • fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @​david-luna
    • important: this bug fix may be breaking for certain uses of TraceState
      • set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.
      • unset now returns the same TraceState instance if key is not present.
      • best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

v2.7.0

2.7.0

🚀 Features

  • feat(sdk-logs): implement log creation metrics #6433 @​anuraaga
  • feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @​starzlocker
  • feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @​maryliag

🐛 Bug Fixes

  • fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

v2.6.1

2.6.1

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @​rlj1202
  • fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @​overbalance
  • fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @​overbalance

🏠 Internal

... (truncated)

Changelog

Sourced from @​opentelemetry/resources's changelog.

2.7.1

🐛 Bug Fixes

  • fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @​david-luna
    • important: this bug fix may be breaking for certain uses of TraceState
      • set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.
      • unset now returns the same TraceState instance if key is not present.
      • best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

2.7.0

🚀 Features

  • feat(sdk-logs): implement log creation metrics #6433 @​anuraaga
  • feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @​starzlocker
  • feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @​maryliag

🐛 Bug Fixes

  • fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

2.6.1

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): improve _warnOnPreloadedModules function not to show warning logs when the module is not marked as loaded #6095 @​rlj1202
  • fix(sdk-trace-base): derive internal SpanOptions from API type to prevent drift #6478 @​overbalance
  • fix(span): enforce attributePerEventCountLimit, attributePerLinkCountLimit, linkCountLimit, and attributeValueLengthLimit for event/link attributes #6479 @​overbalance
  • fix(context-zone): guard onCancelTask against terminal-state tasks to prevent infinite loop with rc-align (Ant Design) in React 16 dev mode #6512 @​Renegade2345

🏠 Internal

... (truncated)

Commits
  • 2400d83 chore: prepare next release (#6647)
  • f7a9b7c fix(otlp-transformer): pin protobufjs to 8.0.1 (#6646)
  • cb38d7f test(otlp-transformer): add metrics transfrom benchmark (#6628)
  • a28f12f fix(opentelemetry-core): defer tracestate vaidation (#6459)
  • b27c514 refactor(opentelemetry-exporter-prometheus): do not call `enforcePrometheusNa...
  • a2a8186 perf(sdk-trace-base): optimize TraceIdRatioBasedSampler hex parsing (#6284)
  • 4c0f3f1 feat(sdk-node): set TracerProvider in startNodeSDK() (#6607)
  • 417f2f1 fix(instr-xhr): do not unpatch XHR methods (#6611)
  • 47ac523 Revert "chore: allow browser maintainers to approve changelog edits" (#6627)
  • 86c621d fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix pr...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/resources since your current version.


Note

Medium Risk
This is a dependency upgrade across the core axiom package and multiple telemetry examples; as a major-version bump in OpenTelemetry it may introduce runtime/behavior changes in resource/trace metadata handling.

Overview
Updates @opentelemetry/resources to ^2.7.1 across packages/ai and all OpenTelemetry-related example apps, aligning the repo on the same newer OpenTelemetry resources implementation.

Regenerates pnpm-lock.yaml accordingly, removing older @opentelemetry/resources versions and updating related OpenTelemetry transitive resolutions (notably @opentelemetry/core) to match the new dependency graph.

Reviewed by Cursor Bugbot for commit c0fc081. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 20, 2026
cursor[bot]
cursor Bot reviewed Apr 20, 2026
View reviewed changes
Comment thread examples/telemetry-minimal/package.json Outdated
@dependabot
chore(deps): bump @opentelemetry/resources from 1.30.1 to 2.7.1
c0fc081 
Bumps [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) from 1.30.1 to 2.7.1.
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.7.1)

---
updated-dependencies:
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump @opentelemetry/resources from 1.30.1 to 2.7.0 chore(deps): bump @opentelemetry/resources from 1.30.1 to 2.7.1 May 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/opentelemetry/resources-2.7.0 branch from 44ee7c2 to c0fc081 Compare May 11, 2026 17:12
@pkg-pr-new

pkg-pr-new Bot commented May 11, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/axiom@312

commit: c0fc081

@pkg-pr-new

pkg-pr-new Bot commented May 11, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/axiom@312

commit: c0fc081

cursor[bot]
cursor Bot reviewed May 11, 2026
View reviewed changes

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit c0fc081. Configure here.

Comment thread examples/telemetry-minimal/package.json
"@opentelemetry/api": "^1.4.0",
"@opentelemetry/exporter-trace-otlp-proto": "^0.41.0",
"@opentelemetry/resources": "^1.13.0",
"@opentelemetry/resources": "^2.7.1",

@cursor cursor Bot May 11, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump breaks telemetry-minimal example at runtime

High Severity

@opentelemetry/resources was bumped from ^1.13.0 to ^2.7.1 in telemetry-minimal, but the v2 package removed the Resource class constructor. The code in instrumentation.ts uses new Resource({...}) which is the v1 API — v2 requires resourceFromAttributes() instead. All other examples already use the v2 API. Additionally, @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-node remain at ^1.13.0, creating cross-major-version incompatibility with resources v2.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit c0fc081. Configure here.

@dependabot @github

dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #321.

@dependabot dependabot Bot closed this May 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/opentelemetry/resources-2.7.0 branch May 12, 2026 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants