Skip to content

feat(deps): Bump OpenTelemetry dependencies to latest - #21988

Merged
andreiborza merged 1 commit into
developfrom
ab/bump-otel-deps-latest
Jul 6, 2026
Merged

feat(deps): Bump OpenTelemetry dependencies to latest#21988
andreiborza merged 1 commit into
developfrom
ab/bump-otel-deps-latest

Conversation

@andreiborza

Copy link
Copy Markdown
Member

Bumps the SDK's pinned OpenTelemetry dependencies to latest. Peer dependency ranges are intentionally left wide to preserve consumer compatibility; only the SDK's own pinned dev/runtime resolutions were raised.

Versions

  • @opentelemetry/core, sdk-trace-base, resources: 2.6.12.9.0
  • @opentelemetry/instrumentation, exporter-trace-otlp-http, instrumentation-http: 0.214.00.220.0
  • @opentelemetry/semantic-conventions: 1.40.01.41.1 (integration tests only)
  • @opentelemetry/api: already at latest (1.9.1)

No source changes required

Upstream shipped breaking changes in this range, but none affect code paths the SDK uses:

  • 2.9.0 changed the BatchSpanProcessor/SimpleSpanProcessor constructors to an options object. @opentelemetry/sdk-trace-base re-exports them via a compat shim that keeps the old positional signature, which is what the SDK uses.
  • 2.8.0 moved W3C tracestate validation into TraceState.set(). The SDK uses its own vendored TraceState (ref(opentelemetry): Vendor minimal TraceState implementation #21192), so its DSC keys and values are unaffected.
  • 0.220.0 hardened HTTP semantic-convention emission. The SDK ships its own vendored HTTP instrumentation, so this does not apply.

Compatibility

The optional OpenTelemetry peer dependency ranges (^1.30.1 || ^2.1.0, >=0.57.1 <1) already permit these versions and are left unchanged, so consumer compatibility is unaffected. @sentry/node-core and @sentry/node build cleanly and unit tests pass against the new versions.

Bump the SDK's pinned OpenTelemetry versions to latest:
- @opentelemetry/core, sdk-trace-base, resources: 2.6.1 to 2.9.0
- @opentelemetry/instrumentation, exporter-trace-otlp-http, instrumentation-http: 0.214.0 to 0.220.0
- @opentelemetry/semantic-conventions: 1.40.0 to 1.41.1 (integration tests only)
Peer dependency ranges are intentionally left wide (^1.30.1 || ^2.1.0, >=0.57.1 <1)
to preserve consumer compatibility; only the SDK's own pinned dev/runtime
resolutions were raised. No source changes were required:
- The 2.9.0 BatchSpanProcessor/SimpleSpanProcessor constructor change is absorbed
by the sdk-trace-base compat shim, which keeps the positional signature the SDK uses.
- The 2.8.0 tracestate set()-time W3C validation does not affect us because the SDK
uses its own vendored TraceState.
- The 0.220.0 HTTP semconv hardening does not apply; the SDK ships its own vendored
HTTP instrumentation.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@andreiborza
andreiborza requested review from a team as code ownersJuly 6, 2026 13:38
@andreiborza
andreiborza requested review from JPeer264, chargome, mydea and nicohrubec and removed request for a teamJuly 6, 2026 13:38

@chargomechargome left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wow

@andreiborza

Copy link
Copy Markdown
MemberAuthor

bugbot run

@cursorcursorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 5bc6c46. Configure here.

@JPeer264JPeer264 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice

@github-actions

Copy link
Copy Markdown
Contributor

size-limit report 📦

⚠️Warning: Base artifact is not the latest one, because the latest workflow run is not done yet. This may lead to incorrect results. Try to re-run all tests to get up to date results.

PathSize% ChangeChange
@sentry/browser27.59 kB--
@sentry/browser - with treeshaking flags26.03 kB--
@sentry/browser (incl. Tracing)46.24 kB--
@sentry/browser (incl. Tracing + Span Streaming)48.01 kB--
@sentry/browser (incl. Tracing, Profiling)51.01 kB--
@sentry/browser (incl. Tracing, Replay)85.49 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags75.1 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)90.19 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)102.84 kB--
@sentry/browser (incl. Feedback)44.76 kB--
@sentry/browser (incl. sendFeedback)32.38 kB--
@sentry/browser (incl. FeedbackAsync)37.51 kB--
@sentry/browser (incl. Metrics)28.67 kB--
@sentry/browser (incl. Logs)28.91 kB--
@sentry/browser (incl. Metrics & Logs)29.59 kB--
@sentry/react29.38 kB--
@sentry/react (incl. Tracing)48.51 kB--
@sentry/vue33.03 kB--
@sentry/vue (incl. Tracing)48.11 kB--
@sentry/svelte27.61 kB--
CDN Bundle30 kB--
CDN Bundle (incl. Tracing)48.24 kB--
CDN Bundle (incl. Logs, Metrics)31.57 kB--
CDN Bundle (incl. Tracing, Logs, Metrics)49.54 kB--
CDN Bundle (incl. Replay, Logs, Metrics)70.77 kB--
CDN Bundle (incl. Tracing, Replay)85.7 kB--
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)87 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)91.49 kB--
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)92.78 kB--
CDN Bundle - uncompressed89.35 kB--
CDN Bundle (incl. Tracing) - uncompressed145.96 kB--
CDN Bundle (incl. Logs, Metrics) - uncompressed94.05 kB--
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed149.93 kB--
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed218.59 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed264.97 kB--
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed268.93 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed278.68 kB--
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed282.62 kB--
@sentry/nextjs (client)50.95 kB--
@sentry/sveltekit (client)46.65 kB--
@sentry/core/server78.38 kB--
@sentry/core/browser64.73 kB--
@sentry/node-core63.21 kB+0.03%+15 B 🔺
@sentry/node123.77 kB+0.46%+566 B 🔺
@sentry/node/import (ESM hook with diagnostics-channel injection)69.95 kB--
@sentry/node/light50.72 kB+0.01%+1 B 🔺
@sentry/node - without tracing74.82 kB+0.78%+576 B 🔺
@sentry/aws-serverless85.6 kB+0.68%+576 B 🔺
@sentry/cloudflare (withSentry) - minified181.68 kB--
@sentry/cloudflare (withSentry)449.39 kB--

View base workflow run

@andreiborza
andreiborza merged commit 4bb17b8 into developJul 6, 2026
298 checks passed
@andreiborza
andreiborza deleted the ab/bump-otel-deps-latest branch July 6, 2026 14:39
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@andreiborza@JPeer264@chargome@nicohrubec