chore(deps): bump the production-dependencies group with 4 updates by dependabot[bot] · Pull Request #37 · octraban/octraban_backend

dependabot · 2026-07-27T09:28:26Z

Bumps the production-dependencies group with 4 updates: @aws-sdk/client-s3, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-http and @opentelemetry/sdk-node.

Updates @aws-sdk/client-s3 from 3.1090.0 to 3.1095.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)

core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

clients: update client endpoints as of 2026-07-24 (f84113a7)

client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)

client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)

client-dynamodb: Endpoint test standardizations (2e9ccdb4)

client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)

client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)

client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)

core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)

client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)

client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)

client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)

client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)

client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)

client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)

client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)

client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @aws-sdk/client-s3

3.1091.0 (2026-07-20)

Note: Version bump only for package @aws-sdk/client-s3

Commits

753d651 Publish v3.1095.0
bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
c379112 Publish v3.1094.0
0f79b6a Publish v3.1093.0
80f0df5 Publish v3.1092.0
a1269f7 Publish v3.1091.0
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.79.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-restify bumped from ^0.65.0 to ^0.66.0

... (truncated)

Commits

27e172a chore: release main (#3596)
466d5de feat(deps): update deps matching '@opentelemetry/*' (#3629)
b7efd7b chore(*): migrate to sdk-trace (#3599)
3ae8a1b fix(auto-instrumentations-node): avoid duplicate diag logger warning in regis...
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 4 updates: [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3), [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node), [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) and [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js). Updates `@aws-sdk/client-s3` from 3.1090.0 to 3.1095.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3) Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.79.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.79.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1095.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.79.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group with 4 updates - #37

chore(deps): bump the production-dependencies group with 4 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-fbd84f1b95

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v3.1095.0

3.1095.0(2026-07-24)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.1094.0

3.1094.0(2026-07-23)

New Features

3.1095.0 (2026-07-24)

3.1094.0 (2026-07-23)

3.1093.0 (2026-07-22)

3.1092.0 (2026-07-21)

3.1091.0 (2026-07-20)

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants