From 1fdf2d5f464ab4bb90a0146d7a12be0a43db619f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Jul 2026 00:12:13 +0000 Subject: [PATCH 1/3] fix: upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0 Snyk has created this PR to upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0. See this package in yarn: @opentelemetry/instrumentation-express See this project in Snyk: https://app.snyk.io/org/cloudinaryltd/project/49b18dd8-4139-4a46-8963-719d2e981418?utm_source=github&utm_medium=referral&page=upgrade-pr --- package.json | 2 +- yarn.lock | 26 +++++++++++++++++++++----- 2 files changed, 22 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 348d6bd..011e3f9 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "@opentelemetry/api": "^1.9.1", "@opentelemetry/exporter-prometheus": "^0.218.0", "@opentelemetry/instrumentation": "^0.218.0", - "@opentelemetry/instrumentation-express": "^0.66.0", + "@opentelemetry/instrumentation-express": "^0.67.0", "@opentelemetry/instrumentation-http": "^0.218.0", "@opentelemetry/resources": "^2.7.1", "@opentelemetry/sdk-node": "^0.218.0", diff --git a/yarn.lock b/yarn.lock index 0d87f6f..1db8388 100644 --- a/yarn.lock +++ b/yarn.lock @@ -98,6 +98,13 @@ dependencies: "@opentelemetry/api" "^1.3.0" +"@opentelemetry/api-logs@0.219.0": + version "0.219.0" + resolved "https://registry.yarnpkg.com/@opentelemetry/api-logs/-/api-logs-0.219.0.tgz#3303f10f43e6ff1741f8f6019e43a92723781630" + integrity sha512-FFx7YnaYJlIjqWW/AG/yAZ0L/NEY724PipXXXQLdtZPbLwBGbUMTGL1i/esI56TWfTUXxhLfpgrnWJCG8aUJyg== + dependencies: + "@opentelemetry/api" "^1.3.0" + "@opentelemetry/api@^1.3.0", "@opentelemetry/api@^1.9.1": version "1.9.1" resolved "https://registry.yarnpkg.com/@opentelemetry/api/-/api-1.9.1.tgz#c1b0346de336ba55af2d5a7970882037baedec05" @@ -251,13 +258,13 @@ "@opentelemetry/sdk-trace-base" "2.7.1" "@opentelemetry/semantic-conventions" "^1.29.0" -"@opentelemetry/instrumentation-express@^0.66.0": - version "0.66.0" - resolved "https://registry.yarnpkg.com/@opentelemetry/instrumentation-express/-/instrumentation-express-0.66.0.tgz#41f12f657112a2049a7a007db2ebdb15338b01da" - integrity sha512-G1xTh5M5shklMgIyUXWDjU2BakulKtcISaM4U5TyanvO7R4xbB3iC7YQ8QKegLXaOs81Ku8RlcIcbYRrz/82wQ== +"@opentelemetry/instrumentation-express@^0.67.0": + version "0.67.0" + resolved "https://registry.yarnpkg.com/@opentelemetry/instrumentation-express/-/instrumentation-express-0.67.0.tgz#0a63c4900db27b7203b7b7d01a61a6d88b97eeea" + integrity sha512-1WTWX2YNZIV+jPmEqdf/Vd1gHMT92TKA/0pf/iIItWhV6+RhzhnUUW4kSWQn8L3qVcgWEzQ860/ZOwaIwayi8A== dependencies: "@opentelemetry/core" "^2.0.0" - "@opentelemetry/instrumentation" "^0.218.0" + "@opentelemetry/instrumentation" "^0.219.0" "@opentelemetry/semantic-conventions" "^1.27.0" "@opentelemetry/instrumentation-http@^0.218.0": @@ -279,6 +286,15 @@ import-in-the-middle "^3.0.0" require-in-the-middle "^8.0.0" +"@opentelemetry/instrumentation@^0.219.0": + version "0.219.0" + resolved "https://registry.yarnpkg.com/@opentelemetry/instrumentation/-/instrumentation-0.219.0.tgz#84399affd8ee4a12cb199f325c4858654d8dedee" + integrity sha512-X5t7I8GyIO9rmGHwoedZLREpQqrF1WW2nxzNNym6HOKpFiE+rvqV3ngC0xcZVO2YwIGf3KKmRdWrYwdwz3H9RQ== + dependencies: + "@opentelemetry/api-logs" "0.219.0" + import-in-the-middle "^3.0.0" + require-in-the-middle "^8.0.0" + "@opentelemetry/otlp-exporter-base@0.218.0": version "0.218.0" resolved "https://registry.yarnpkg.com/@opentelemetry/otlp-exporter-base/-/otlp-exporter-base-0.218.0.tgz#f33e3217ce568756baa132fabe30f0c9345db086" From cd3431574cbcc3cac4c02318c91f3165a318a181 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 9 Jul 2026 08:57:16 +0000 Subject: [PATCH 2/3] fix: upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0 Snyk has created this PR to upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0. See this package in yarn: @opentelemetry/instrumentation-express See this project in Snyk: https://app.snyk.io/org/cloudinaryltd/project/49b18dd8-4139-4a46-8963-719d2e981418?utm_source=github&utm_medium=referral&page=upgrade-pr From fe57ba595f7830956ed2ffddaaf3befa90e30f11 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 14 Jul 2026 22:32:48 +0000 Subject: [PATCH 3/3] fix: upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0 Snyk has created this PR to upgrade @opentelemetry/instrumentation-express from 0.66.0 to 0.67.0. See this package in yarn: @opentelemetry/instrumentation-express See this project in Snyk: https://app.snyk.io/org/cloudinaryltd/project/49b18dd8-4139-4a46-8963-719d2e981418?utm_source=github&utm_medium=referral&page=upgrade-pr