Skip to content

feat(deps): Bump OpenTelemetry dependencies to latest#21988

Merged
andreiborza merged 1 commit into
developfrom
ab/bump-otel-deps-latest
Jul 6, 2026
Merged

feat(deps): Bump OpenTelemetry dependencies to latest#21988
andreiborza merged 1 commit into
developfrom
ab/bump-otel-deps-latest

Conversation

@andreiborza

Copy link
Copy Markdown
Member

Bumps the SDK's pinned OpenTelemetry dependencies to latest. Peer dependency ranges are intentionally left wide to preserve consumer compatibility; only the SDK's own pinned dev/runtime resolutions were raised.

Versions

  • @opentelemetry/core, sdk-trace-base, resources: 2.6.12.9.0
  • @opentelemetry/instrumentation, exporter-trace-otlp-http, instrumentation-http: 0.214.00.220.0
  • @opentelemetry/semantic-conventions: 1.40.01.41.1 (integration tests only)
  • @opentelemetry/api: already at latest (1.9.1)

No source changes required

Upstream shipped breaking changes in this range, but none affect code paths the SDK uses:

  • 2.9.0 changed the BatchSpanProcessor/SimpleSpanProcessor constructors to an options object. @opentelemetry/sdk-trace-base re-exports them via a compat shim that keeps the old positional signature, which is what the SDK uses.
  • 2.8.0 moved W3C tracestate validation into TraceState.set(). The SDK uses its own vendored TraceState (ref(opentelemetry): Vendor minimal TraceState implementation #21192), so its DSC keys and values are unaffected.
  • 0.220.0 hardened HTTP semantic-convention emission. The SDK ships its own vendored HTTP instrumentation, so this does not apply.

Compatibility

The optional OpenTelemetry peer dependency ranges (^1.30.1 || ^2.1.0, >=0.57.1 <1) already permit these versions and are left unchanged, so consumer compatibility is unaffected. @sentry/node-core and @sentry/node build cleanly and unit tests pass against the new versions.

Bump the SDK's pinned OpenTelemetry versions to latest:

- @opentelemetry/core, sdk-trace-base, resources: 2.6.1 to 2.9.0
- @opentelemetry/instrumentation, exporter-trace-otlp-http, instrumentation-http: 0.214.0 to 0.220.0
- @opentelemetry/semantic-conventions: 1.40.0 to 1.41.1 (integration tests only)

Peer dependency ranges are intentionally left wide (^1.30.1 || ^2.1.0, >=0.57.1 <1)
to preserve consumer compatibility; only the SDK's own pinned dev/runtime
resolutions were raised. No source changes were required:

- The 2.9.0 BatchSpanProcessor/SimpleSpanProcessor constructor change is absorbed
  by the sdk-trace-base compat shim, which keeps the positional signature the SDK uses.
- The 2.8.0 tracestate set()-time W3C validation does not affect us because the SDK
  uses its own vendored TraceState.
- The 0.220.0 HTTP semconv hardening does not apply; the SDK ships its own vendored
  HTTP instrumentation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@andreiborza andreiborza requested review from a team as code owners July 6, 2026 13:38
@andreiborza andreiborza requested review from JPeer264, chargome, mydea and nicohrubec and removed request for a team July 6, 2026 13:38

@chargome chargome left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wow

@andreiborza

Copy link
Copy Markdown
Member Author

bugbot run

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 5bc6c46. Configure here.

@JPeer264 JPeer264 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice

@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

⚠️ Warning: Base artifact is not the latest one, because the latest workflow run is not done yet. This may lead to incorrect results. Try to re-run all tests to get up to date results.

Path Size % Change Change
@sentry/browser 27.59 kB - -
@sentry/browser - with treeshaking flags 26.03 kB - -
@sentry/browser (incl. Tracing) 46.24 kB - -
@sentry/browser (incl. Tracing + Span Streaming) 48.01 kB - -
@sentry/browser (incl. Tracing, Profiling) 51.01 kB - -
@sentry/browser (incl. Tracing, Replay) 85.49 kB - -
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 75.1 kB - -
@sentry/browser (incl. Tracing, Replay with Canvas) 90.19 kB - -
@sentry/browser (incl. Tracing, Replay, Feedback) 102.84 kB - -
@sentry/browser (incl. Feedback) 44.76 kB - -
@sentry/browser (incl. sendFeedback) 32.38 kB - -
@sentry/browser (incl. FeedbackAsync) 37.51 kB - -
@sentry/browser (incl. Metrics) 28.67 kB - -
@sentry/browser (incl. Logs) 28.91 kB - -
@sentry/browser (incl. Metrics & Logs) 29.59 kB - -
@sentry/react 29.38 kB - -
@sentry/react (incl. Tracing) 48.51 kB - -
@sentry/vue 33.03 kB - -
@sentry/vue (incl. Tracing) 48.11 kB - -
@sentry/svelte 27.61 kB - -
CDN Bundle 30 kB - -
CDN Bundle (incl. Tracing) 48.24 kB - -
CDN Bundle (incl. Logs, Metrics) 31.57 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) 49.54 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) 70.77 kB - -
CDN Bundle (incl. Tracing, Replay) 85.7 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 87 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) 91.49 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 92.78 kB - -
CDN Bundle - uncompressed 89.35 kB - -
CDN Bundle (incl. Tracing) - uncompressed 145.96 kB - -
CDN Bundle (incl. Logs, Metrics) - uncompressed 94.05 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 149.93 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 218.59 kB - -
CDN Bundle (incl. Tracing, Replay) - uncompressed 264.97 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 268.93 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 278.68 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 282.62 kB - -
@sentry/nextjs (client) 50.95 kB - -
@sentry/sveltekit (client) 46.65 kB - -
@sentry/core/server 78.38 kB - -
@sentry/core/browser 64.73 kB - -
@sentry/node-core 63.21 kB +0.03% +15 B 🔺
@sentry/node 123.77 kB +0.46% +566 B 🔺
@sentry/node/import (ESM hook with diagnostics-channel injection) 69.95 kB - -
@sentry/node/light 50.72 kB +0.01% +1 B 🔺
@sentry/node - without tracing 74.82 kB +0.78% +576 B 🔺
@sentry/aws-serverless 85.6 kB +0.68% +576 B 🔺
@sentry/cloudflare (withSentry) - minified 181.68 kB - -
@sentry/cloudflare (withSentry) 449.39 kB - -

View base workflow run

@andreiborza andreiborza merged commit 4bb17b8 into develop Jul 6, 2026
298 checks passed
@andreiborza andreiborza deleted the ab/bump-otel-deps-latest branch July 6, 2026 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants