chore(deps): bump the backend-npm group across 1 directory with 15 updates by dependabot[bot] · Pull Request #678 · FinesseStudioLab/Trivela

dependabot · 2026-06-23T15:36:32Z

Bumps the backend-npm group with 15 updates in the /backend directory:

Package	From	To
@opentelemetry/exporter-trace-otlp-http	`0.55.0`	`0.219.0`
@opentelemetry/instrumentation-express	`0.45.0`	`0.67.0`
@opentelemetry/instrumentation-http	`0.55.0`	`0.219.0`
@opentelemetry/resources	`1.30.1`	`2.8.0`
@opentelemetry/sdk-node	`0.55.0`	`0.219.0`
@stellar/stellar-sdk	`14.6.1`	`16.0.1`
better-sqlite3	`11.10.0`	`12.11.1`
dotenv	`16.6.1`	`17.4.2`
express	`4.22.2`	`5.2.1`
pino	`9.14.0`	`10.3.1`
zod	`3.25.76`	`4.4.3`
@readme/openapi-parser	`2.7.0`	`6.1.3`
@redocly/cli	`1.34.15`	`2.35.1`
js-yaml	`4.2.0`	`5.1.0`
typescript	`5.9.3`	`6.0.3`

Updates @opentelemetry/exporter-trace-otlp-http from 0.55.0 to 0.219.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/exporter-trace-otlp-http since your current version.

Updates @opentelemetry/instrumentation-express from 0.45.0 to 0.67.0

Release notes

Sourced from @opentelemetry/instrumentation-express's releases.

instrumentation-redis: v0.67.0

0.67.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

instrumentation-pino: v0.65.0

0.65.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

instrumentation-net: v0.63.0

0.63.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-nestjs-core: v0.65.0

0.65.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-mysql: v0.65.0

0.65.0 (2026-06-11)

... (truncated)

Changelog

Sourced from @opentelemetry/instrumentation-express's changelog.

0.67.0 (2026-06-11)

Features

deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

0.66.0 (2026-05-13)

Features

deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.64.0 to ^0.65.0

0.65.0 (2026-05-06)

Features

deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.63.0 to ^0.64.0

0.64.0 (2026-04-29)

Features

deps: update deps matching '@opentelemetry/*' (#3497) (a91133a)

... (truncated)

Commits

bd017c8 chore: release main (#3451)
8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
36a030c chore: switch to short license header (#3476)
fb1f127 fix(instrumentation-express): end span on close event rather than finish (#3462)
ed97091 chore: release main (#3415)
c8df394 feat(deps): update deps matching '@opentelemetry/*' (#3450)
92313a7 fix(instrumentation-express): propagate baggage in middleware (#3437)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/instrumentation-express since your current version.

Updates @opentelemetry/instrumentation-http from 0.55.0 to 0.219.0

Release notes

Sourced from @opentelemetry/instrumentation-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/instrumentation-http since your current version.

Updates @opentelemetry/resources from 1.30.1 to 2.8.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.8.0

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

v2.7.0

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

... (truncated)

Changelog

Sourced from @opentelemetry/resources's changelog.

2.8.0

🚀 Features

feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @mcollina

feat(sdk-metrics): implement metric reader self-observability metrics #6449 @anuraaga

feat(core): add hrTimeToSeconds #6449 @anuraaga

🐛 Bug Fixes

fix(core): limit processing of incoming "baggage" header to 8192 bytes @pichlermarc

2.7.1

🐛 Bug Fixes

fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @david-luna

important: this bug fix may be breaking for certain uses of TraceState

set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.

unset now returns the same TraceState instance if key is not present.

best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

🏠 Internal

perf(sdk-trace-base): optimize TraceIdRatioBasedSampler performance #6284 @AbhiPrasad

test: test Node.js 26 in CI #6671 @cjihrig

2.7.0

🚀 Features

feat(sdk-logs): implement log creation metrics #6433 @anuraaga

feat(sdk-metrics): add the cardinalitySelector argument to PeriodicExportingMetricReaders #6460 @starzlocker

feat(opentelemetry-core): add extra checks on internal merge function for safety #6587 @maryliag

🐛 Bug Fixes

fix(opentelemetry-resources): do not discard OTEL_RESOURCE_ATTRIBUTES when it contains empty kv pairs

🏠 Internal

test(exporter-zipkin): fix broken browser test assertions and add missing coverage #6566 @overbalance

fix(sdk-metrics): repair ExponentialHistogram tests #6565 @overbalance

perf(sdk-metrics): reduce loop overhead in sdk hot paths #6593 @mcollina

2.6.1

🐛 Bug Fixes

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/resources since your current version.

Updates @opentelemetry/sdk-node from 0.55.0 to 0.219.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

fix(configuration)!: stop removing null values from parsed config object #6679 @trentm

It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.

fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @dyladan

feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @pichlermarc

fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @trentm

🚀 Features

feat(sdk-node): wire up metric producers from declarative config #6712 @MikeGoldsmith

feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @pichlermarc

🐛 Bug Fixes

fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @MikeGoldsmith

fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @MikeGoldsmith

fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @MikeGoldsmith

fix(otlp-transformer): do not attempt to skip groups #6704 @pichlermarc

fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @afharo

fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @david-luna

fix(browser-detector): user agent resource attribute always #6754 @david-luna

fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @cjihrig

fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @Janealter

fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @trentm

📚 Documentation

docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @devareddy05

🏠 Internal

refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

... (truncated)

Commits

13a035b chore: prepare next release (#6756)
4b13587 Merge commit from fork
71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
555fca6 Update renovate.json to use matchManagers (#6141)
b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
002267b chore: complete the move to the smaller SPDX license header (#6791)
056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
3bd69ce fix(configuration): improve environment variable substitution to handle all t...
bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/sdk-node since your current version.

Updates @stellar/stellar-sdk from 14.6.1 to 16.0.1

Release notes

Sourced from @stellar/stellar-sdk's releases.

v16.0.1

v16.0.1

Fixed

Fixed the ESM library build so the inlined @stellar/js-xdr source resolves correctly under Yarn PnP (and Node's native ESM resolver). Because the build preserves modules, Rollup emits js-xdr's source into a nested package scope, but js-xdr does not declare type: "module", so Node and Yarn PnP parsed those preserved files as CommonJS and failed to resolve them. Rollup now marks the emitted js-xdr package as type: "module" so its source is parsed as ESM #1484.

Full Changelog: stellar/js-stellar-sdk@v16.0.0...v16.0.1

v16.0.0

v16.0.0

Migration guide

There are a few major updates in this release:

JS Stellar Base (@stellar/stellar-base) was rewritten in TypeScript, which provides proper type definitions and fixes inconsistencies caused by manual type declarations. (#1399)

JS Stellar Base is now merged into the JS Stellar SDK. Everything lives in one place now. (#1399)

The JS SDK now has better tree-shaking, which should result in a lighter bundle size. (#1397)

Protocol 27 support: the XDR was regenerated for CAP-71, and the Soroban authorization helpers can build and sign the new address-bound (SOROBAN_CREDENTIALS_ADDRESS_V2) and delegated (SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES) credential types. The legacy SOROBAN_CREDENTIALS_ADDRESS (V1) credential remains the default; ADDRESS_V2 is opt-in (see below), as it is only valid on networks that have activated CAP-71. (#1429, #1450)

1. Breaking Changes

These break code, builds, or installs until you change something.

Install & runtime

Drop @stellar/stellar-base from your dependencies if you were importing it manually. It is now bundled into @stellar/stellar-sdk. Remove the package and switch all imports from @stellar/stellar-base to @stellar/stellar-sdk. (#1399)

Upgrade to Node 22 or later. engines.node is now >=22.0.0; CI tests against [22, 24]. (#1408)

... (truncated)

Changelog

Sourced from @stellar/stellar-sdk's changelog.

v16.0.1

Fixed

Fixed the ESM library build so the inlined @stellar/js-xdr source resolves correctly under Yarn PnP (and Node's native ESM resolver). Because the build preserves modules, Rollup emits js-xdr's source into a nested package scope, but js-xdr does not declare type: "module", so Node and Yarn PnP parsed those preserved files as CommonJS and failed to resolve them. Rollup now marks the emitted js-xdr package as type: "module" so its source is parsed as ESM #1484.

v16.0.0

There are a few major updates in this release:

JS Stellar Base (@stellar/stellar-base) was rewritten in TypeScript, which provides proper type definitions and fixes inconsistencies caused by manual type declarations. (#1399)

JS Stellar Base is now merged into the JS Stellar SDK. Everything lives in one place now. (#1399)

The JS SDK now has better tree-shaking, which should result in a lighter bundle size. (#1397)

Protocol 27 support: the XDR was regenerated for CAP-71, and the Soroban authorization helpers can build and sign the new address-bound (SOROBAN_CREDENTIALS_ADDRESS_V2) and delegated (SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES) credential types. The legacy SOROBAN_CREDENTIALS_ADDRESS (V1) credential remains the default; ADDRESS_V2 is opt-in (see below), as it is only valid on networks that have activated CAP-71. (#1429, #1450)

1. Breaking Changes

These break code, builds, or installs until you change something.

Install & runtime

Drop @stellar/stellar-base from your dependencies if you were importing it manually. It is now bundled into @stellar/stellar-sdk. Remove the package and switch all imports from @stellar/stellar-base to @stellar/stellar-sdk. (#1399)

Upgrade to Node 22 or later. engines.node is now >=22.0.0; CI tests against [22, 24]. (#1408)

Stop using the default import. import StellarBase from '@stellar/stellar-sdk' no longer works. Use import * as StellarBase or named imports. (#1396)

Adjust deep lib/ imports. Library output paths moved:

ESM at lib/esm/,

CJS at lib/cjs/,

axios variants at lib/axios/esm/ and lib/axios/cjs/,

... (truncated)

Commits

962fad4 release v16.0.1 (#1494)
8f4284f P27 auth guide fix (#1487)
16dd662 Update Rollup config to support Yarn PnP (#1484)
9999beb V16.0.0 release (#1482)
f8a0a7f Fix TransactionBuilder to exclude resource fee when deriving base fee in clon...
7cdbe5a Lint cleanup (#1477)
6a2b21e Docs: improve changelog/migration guide entry (#1475)
21c722e prepare v16.0.0-rc.2 release (#1473)
246c517 protocol 27 - V2 credential opt in (#1450)
6b6862d Keypair.random perf fix (#1449)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates better-sqlite3 from 11.10.0 to 12.11.1

Release notes

Sourced from better-sqlite3's releases.

v12.11.1

What's Changed

Fix Electron v42 build errors on Windows by @m4heshd in WiseLibs/better-sqlite3#1488

Full Changelog: WiseLibs/better-sqlite3@v12.11.0...v12.11.1

v12.11.0

⚠️CAUTION: NOT A VIABLE RELEASE

Use v12.11.1 instead.

What's Changed

Add missing Electron v42 build target by @m4heshd in WiseLibs/better-sqlite3#1486

Full Changelog: WiseLibs/better-sqlite3@v12.10.1...v12.11.0

v12.10.1

What's Changed

Bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in WiseLibs/better-sqlite3#1451

Fix V8 external API usage for Electron 42 by @tstone-1 in WiseLibs/better-sqlite3#1475

Full Changelog: WiseLibs/better-sqlite3@v12.10.0...v12.10.1

v12.10.0

What's Changed

Update SQLite to version 3.53.1 by @JoshuaWise in WiseLibs/better-sqlite3#1467

Add support for Node.js v26 prebuilds and remove EOL builds (Node.js v20, v23) by @m4heshd in WiseLibs/better-sqlite3#1468

Temporarily rollback support for Electron v42 prebuilds by @m4heshd in WiseLibs/better-sqlite3#1470

Enable percentile functions by @Maxime-J in WiseLibs/better-sqlite3#1447

Full Changelog: WiseLibs/better-sqlite3@v12.9.1...v12.10.0

v12.9.1

⚠️CAUTION: NOT A VIABLE RELEASE

Electron v39+ prebuilds are not building successfully at the moment. Stick to v12.9.0 for now.

What's Changed

Enable percentile functions by @Maxime-J in WiseLibs/better-sqlite3#1447

Add support for electron v42 prebuilds by @m4heshd in WiseLibs/better-sqlite3#1466

New Contribut...
Description has been truncated

vercel · 2026-06-23T15:36:35Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
trivela-frontend	Ready	Preview, Comment	Jun 25, 2026 11:27pm

…dates Bumps the backend-npm group with 15 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.55.0` | `0.219.0` | | [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.45.0` | `0.67.0` | | [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.55.0` | `0.219.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.8.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.55.0` | `0.219.0` | | [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `14.6.1` | `16.0.1` | | [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `11.10.0` | `12.11.1` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.4.2` | | [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` | | [pino](https://github.com/pinojs/pino) | `9.14.0` | `10.3.1` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | | [@readme/openapi-parser](https://github.com/readmeio/oas/tree/HEAD/packages/parser) | `2.7.0` | `6.1.3` | | [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.15` | `2.35.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.1.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | Updates `@opentelemetry/exporter-trace-otlp-http` from 0.55.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.55.0...experimental/v0.219.0) Updates `@opentelemetry/instrumentation-express` from 0.45.0 to 0.67.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.67.0/packages/instrumentation-express) Updates `@opentelemetry/instrumentation-http` from 0.55.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.55.0...experimental/v0.219.0) Updates `@opentelemetry/resources` from 1.30.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.8.0) Updates `@opentelemetry/sdk-node` from 0.55.0 to 0.219.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.55.0...experimental/v0.219.0) Updates `@stellar/stellar-sdk` from 14.6.1 to 16.0.1 - [Release notes](https://github.com/stellar/js-stellar-sdk/releases) - [Changelog](https://github.com/stellar/js-stellar-sdk/blob/master/CHANGELOG.md) - [Commits](stellar/js-stellar-sdk@v14.6.1...v16.0.1) Updates `better-sqlite3` from 11.10.0 to 12.11.1 - [Release notes](https://github.com/WiseLibs/better-sqlite3/releases) - [Commits](WiseLibs/better-sqlite3@v11.10.0...v12.11.1) Updates `dotenv` from 16.6.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v17.4.2) Updates `express` from 4.22.2 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v4.22.2...v5.2.1) Updates `pino` from 9.14.0 to 10.3.1 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v9.14.0...v10.3.1) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) Updates `@readme/openapi-parser` from 2.7.0 to 6.1.3 - [Release notes](https://github.com/readmeio/oas/releases) - [Changelog](https://github.com/readmeio/oas/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/readmeio/oas/commits/@readme/oas-examples@6.1.3/packages/parser) Updates `@redocly/cli` from 1.34.15 to 2.35.1 - [Release notes](https://github.com/Redocly/redocly-cli/releases) - [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@1.34.15...@redocly/cli@2.35.1) Updates `js-yaml` from 4.2.0 to 5.1.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.2.0...5.1.0) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-npm - dependency-name: "@opentelemetry/instrumentation-express" dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-npm - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-npm - dependency-name: "@opentelemetry/resources" dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.219.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-npm - dependency-name: "@readme/openapi-parser" dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: "@redocly/cli" dependency-version: 2.34.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: "@stellar/stellar-sdk" dependency-version: 16.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: better-sqlite3 dependency-version: 12.11.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: js-yaml dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: pino dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: backend-npm - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-26T23:03:04Z

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 23, 2026

vercel Bot deployed to Preview June 23, 2026 15:37 View deployment

dependabot Bot changed the title ~~chore(deps): bump the backend-npm group in /backend with 15 updates~~ chore(deps): bump the backend-npm group across 1 directory with 15 updates Jun 25, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/backend/backend-npm-3593e106f5 branch from 8628ee0 to 58f0c85 Compare June 25, 2026 23:26

vercel Bot deployed to Preview June 25, 2026 23:27 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the backend-npm group across 1 directory with 15 updates#678

chore(deps): bump the backend-npm group across 1 directory with 15 updates#678
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-npm-3593e106f5

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jun 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

instrumentation-redis: v0.67.0

0.67.0 (2026-06-11)

Features

Dependencies

instrumentation-pino: v0.65.0

0.65.0 (2026-06-11)

Features

Dependencies

instrumentation-net: v0.63.0

0.63.0 (2026-06-11)

Features

instrumentation-nestjs-core: v0.65.0

0.65.0 (2026-06-11)

Features

instrumentation-mysql: v0.65.0

0.65.0 (2026-06-11)

0.67.0 (2026-06-11)

Features

Dependencies

0.66.0 (2026-05-13)

Features

Dependencies

0.65.0 (2026-05-06)

Features

Dependencies

0.64.0 (2026-04-29)

Features

experimental/v0.219.0

0.219.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

v2.8.0

2.8.0

🚀 Features

🐛 Bug Fixes

v2.7.1

2.7.1

🐛 Bug Fixes

🏠 Internal

v2.7.0

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.8.0

🚀 Features

🐛 Bug Fixes

2.7.1

🐛 Bug Fixes

🏠 Internal

2.7.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.6.1

🐛 Bug Fixes

experimental/v0.219.0

0.219.0

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading

New Contribut...
Description has been truncated

vercel Bot commented Jun 23, 2026 •

edited

Loading