ci: bump the development-dependencies group with 5 updates by dependabot[bot] · Pull Request #180 · polymind-inc/agent-framework-js

dependabot · 2026-10-26T02:22:08Z

Bumps the development-dependencies group with 5 updates:

Package	From	To
@biomejs/biome	`2.5.15`	`2.6.2`
@opentelemetry/exporter-metrics-otlp-grpc	`0.222.0`	`0.300.0`
@opentelemetry/exporter-trace-otlp-grpc	`0.222.0`	`0.300.0`
@opentelemetry/context-async-hooks	`2.11.0`	`3.0.0`
vite	`8.3.4`	`8.3.5`

Updates @biomejs/biome from 2.5.15 to 2.6.2

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.6.2

2.6.2

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },
    { "path": "local-plugin.grit" }
  ]
}
Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.
#11432 4befd08 Thanks @ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.6.2

Patch Changes

#12494 3f40430 Thanks @ematipico! - Fix another patch

2.6.1

Patch Changes

#12492 edaa1db Thanks @ematipico! - Fixes a problem with npm publishing

2.6.0

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },

... (truncated)

Commits

0d9aef6 ci: release (#12495)
30ffad1 ci: release (#12493)
8c814e1 ci: release (#12065)
e51cec2 chore: update sponsors (#12428)
cb88f07 feat(lint): add noSvelteClassDirective (#12254)
774b5b5 feat: sorted GraphQL documents (#12318)
914dca7 feat(lint/js): add noUselessCall (#12082)
a3fa0d6 feat(graphql_analyze): implement useSortedArguments (#12282)
5f8ea6c feat(lint): add noVueLifecycleAfterAwait (#12229)
b92638b feat(lint): add noVueShadowNativeEvents (#12136)
Additional commits viewable in compare view

Updates @opentelemetry/exporter-metrics-otlp-grpc from 0.222.0 to 0.300.0

Release notes

Sourced from @opentelemetry/exporter-metrics-otlp-grpc's releases.

experimental/v0.300.0

0.300.0

Summary

The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.

The public interface has changed

for notes on migrating to 3.x / 0.300.x see the upgrade guide

Only stable versions 3.0.0 are compatible with this release

💥 Breaking Changes

chore(shim-opencensus)!: remove the @opentelemetry/shim-opencensus package

In the OpenTelemetry Specification v1.58.0 the OpenCensus compatibility requirements were deprecated. The JavaScript OpenCensus shim package will not receive any more releases after the current 0.222.0 release (source code for last release).

feat(instrumentation-http)!: remove deprecated serverName field from HttpInstrumentationConfig #7081

The serverName option had no effect; stable HTTP semantic conventions do not include http.server_name. Remove it from any setConfig() or constructor call.

feat(sdk-node)!: remove deprecated NodeSDKConfiguration fields logRecordProcessor, metricReader, spanProcessor and deprecated namespace re-exports node, tracing

NodeSDKConfiguration.logRecordProcessor — use logRecordProcessors instead.

NodeSDKConfiguration.metricReader — use metricReaders instead.

NodeSDKConfiguration.spanProcessor — use spanProcessors instead.

export * as node from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-node instead.

export * as tracing from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-base instead.

feat(sdk-logs)!: remove deprecated SdkLogRecord type alias and LoggerProviderConfig type alias #7062

SdkLogRecord — use ReadWriteLogRecord instead.

LoggerProviderConfig — use LoggerProviderOptions instead.

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/sdk-logs/build/src/... or @opentelemetry/sdk-logs/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

Packages that ship separate Node.js and browser implementations export them under explicit subpaths, for example @opentelemetry/sdk-logs/platform. If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(sdk-node)!: remove "jaeger" propagator from @opentelemetry/sdk-node #7077

OTEL_PROPAGATORS=jaeger and { jaeger: null } in the configuration object are no longer recognised. Replace with "tracecontext".

See the 3.x migration guide for full instructions.

fix(opentelemetry-exporter-prometheus)!: default exporter host to localhost #6599 @cjihrig

chore!: bump minimum node.js version to >=22.15.0

feat(api-logs)!: move the Logs API to @opentelemetry/api and remove the standalone @opentelemetry/api-logs package #4862 @hectorhdzg

fix(exporter-prometheus)!: stop reading Prometheus exporter host and port environment variables in the exporter constructor #6966 @LarryHu0217

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

feat(sdk-node)!: drop SDK package re-exports (api, contextBase, core, logs, metrics, resources) #7111 @pichlermarc

api / contextBase → import from @opentelemetry/api

core → import from @opentelemetry/core

logs → import from @opentelemetry/sdk-logs

metrics → import from @opentelemetry/sdk-metrics

resources → import from @opentelemetry/resources

feat(sdk-logs): mark @opentelemetry/sdk-logs as stable #7143 @trentm

See the stable CHANGELOG for future changes to the sdk-logs package.

... (truncated)

Commits

12a5817 chore: prepare next release (#7213)
2a97587 docs: 3.x migration doc edits (#7216)
ebefa76 chore(deps): update dependency eslint to v10.13.0 (#7129)
83b6922 chore(deps): update dependency superagent to v10.4.1 (#7184)
68e9e6e fix(otlp-exporter-base): pick fetch mode from the document origin, not locati...
7d2455e build: lint for unused dependencies with knip (#7200)
5e65e0e fix(core): no longer drop an attribute value that is an object that has `un...
2fbb404 chore(deps): dedupe nx to 23.3.0 (#7205)
c971f52 docs(changelog): trim unreleased entries (#7203)
2516215 feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...
Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-grpc from 0.222.0 to 0.300.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-grpc's releases.

experimental/v0.300.0

0.300.0

Summary

The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.

The public interface has changed

for notes on migrating to 3.x / 0.300.x see the upgrade guide

Only stable versions 3.0.0 are compatible with this release

💥 Breaking Changes

chore(shim-opencensus)!: remove the @opentelemetry/shim-opencensus package

In the OpenTelemetry Specification v1.58.0 the OpenCensus compatibility requirements were deprecated. The JavaScript OpenCensus shim package will not receive any more releases after the current 0.222.0 release (source code for last release).

feat(instrumentation-http)!: remove deprecated serverName field from HttpInstrumentationConfig #7081

The serverName option had no effect; stable HTTP semantic conventions do not include http.server_name. Remove it from any setConfig() or constructor call.

feat(sdk-node)!: remove deprecated NodeSDKConfiguration fields logRecordProcessor, metricReader, spanProcessor and deprecated namespace re-exports node, tracing

NodeSDKConfiguration.logRecordProcessor — use logRecordProcessors instead.

NodeSDKConfiguration.metricReader — use metricReaders instead.

NodeSDKConfiguration.spanProcessor — use spanProcessors instead.

export * as node from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-node instead.

export * as tracing from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-base instead.

feat(sdk-logs)!: remove deprecated SdkLogRecord type alias and LoggerProviderConfig type alias #7062

SdkLogRecord — use ReadWriteLogRecord instead.

LoggerProviderConfig — use LoggerProviderOptions instead.

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/sdk-logs/build/src/... or @opentelemetry/sdk-logs/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

Packages that ship separate Node.js and browser implementations export them under explicit subpaths, for example @opentelemetry/sdk-logs/platform. If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(sdk-node)!: remove "jaeger" propagator from @opentelemetry/sdk-node #7077

OTEL_PROPAGATORS=jaeger and { jaeger: null } in the configuration object are no longer recognised. Replace with "tracecontext".

See the 3.x migration guide for full instructions.

fix(opentelemetry-exporter-prometheus)!: default exporter host to localhost #6599 @cjihrig

chore!: bump minimum node.js version to >=22.15.0

feat(api-logs)!: move the Logs API to @opentelemetry/api and remove the standalone @opentelemetry/api-logs package #4862 @hectorhdzg

fix(exporter-prometheus)!: stop reading Prometheus exporter host and port environment variables in the exporter constructor #6966 @LarryHu0217

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

feat(sdk-node)!: drop SDK package re-exports (api, contextBase, core, logs, metrics, resources) #7111 @pichlermarc

api / contextBase → import from @opentelemetry/api

core → import from @opentelemetry/core

logs → import from @opentelemetry/sdk-logs

metrics → import from @opentelemetry/sdk-metrics

resources → import from @opentelemetry/resources

feat(sdk-logs): mark @opentelemetry/sdk-logs as stable #7143 @trentm

See the stable CHANGELOG for future changes to the sdk-logs package.

... (truncated)

Commits

12a5817 chore: prepare next release (#7213)
2a97587 docs: 3.x migration doc edits (#7216)
ebefa76 chore(deps): update dependency eslint to v10.13.0 (#7129)
83b6922 chore(deps): update dependency superagent to v10.4.1 (#7184)
68e9e6e fix(otlp-exporter-base): pick fetch mode from the document origin, not locati...
7d2455e build: lint for unused dependencies with knip (#7200)
5e65e0e fix(core): no longer drop an attribute value that is an object that has `un...
2fbb404 chore(deps): dedupe nx to 23.3.0 (#7205)
c971f52 docs(changelog): trim unreleased entries (#7203)
2516215 feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...
Additional commits viewable in compare view

Updates @opentelemetry/context-async-hooks from 2.11.0 to 3.0.0

Release notes

Sourced from @opentelemetry/context-async-hooks's releases.

v3.0.0

3.0.0

Summary

The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.

The public interface has changed

for notes on migrating to 3.x / 0.300.x see the upgrade guide

Only experimental versions 0.300.0 are compatible with this release

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.58.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.11.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

Packages that ship separate Node.js and browser implementations export them under explicit subpaths, for example @opentelemetry/core/platform. If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

feat(exporter-jaeger)!: remove @opentelemetry/exporter-jaeger package

The Jaeger exporter has been removed. Jaeger has deprecated its custom Thrift collection protocols in favor of standard OpenTelemetry Protocol (OTLP). Use standard OTLP exporters instead.

See the 3.x migration guide for full instructions.

chore!: bump minimum node.js version to >=22.15.0

chore(sdk-trace-base, sdk-trace-web)!: remove the @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-web packages #7117

The sdk-trace-base, sdk-trace-web, and sdk-trace-node packages have been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

feat!: replace the browser field in package.json with #platform subpath imports #7141 @overbalance

Resolvers with the node condition load the Node.js build; all others load the browser build. Bundlers without imports support fail; see the migration guide.

webpack needs 5.54 or later. Parcel needs package exports enabled and cannot resolve #platform from require().

Root type declarations describe the Node.js build.

feat(resources)!: remove the ./detectors/platform and ./detectors/platform/browser subpath exports; import from the package root #7141 @overbalance

feat(core, sdk-trace, sdk-logs, exporter-zipkin)!: remove the ./platform and ./platform/browser subpath exports; import from the package root #7141 @overbalance

fix(sdk-logs)!: replace LoggerConfig.disabled with enabled to match the specification #7160

Replace disabled: true with enabled: false, and disabled: false with enabled: true. Loggers remain enabled by default.

... (truncated)

Changelog

Sourced from @opentelemetry/context-async-hooks's changelog.

3.0.0

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.56.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.12.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

feat(exporter-jaeger)!: remove @opentelemetry/exporter-jaeger package

The Jaeger exporter has been removed. Jaeger has deprecated its custom Thrift collection protocols in favor of standard OpenTelemetry Protocol (OTLP). Use standard OTLP exporters instead.

See the 3.x migration guide for full instructions.

chore!: bump minimum node.js version to >=22.15.0

chore(sdk-trace-base, sdk-trace-web)!: remove the @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-web packages #7117

The sdk-trace-base, sdk-trace-web, and sdk-trace-node packages have been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

feat!: replace the browser field in package.json with #platform subpath imports #7141 @overbalance

Resolvers with the node condition load the Node.js build; all others load the browser build. Bundlers without imports support fail; see the migration guide.

webpack needs 5.54 or later. Parcel needs package exports enabled and cannot resolve #platform from require().

Root type declarations describe the Node.js build.

feat(resources)!: remove the ./detectors/platform and ./detectors/platform/browser subpath exports; import from the package root #7141 @overbalance

feat(core, sdk-trace, sdk-logs, exporter-zipkin)!: remove the ./platform and ./platform/browser subpath exports; import from the package root #7141 @overbalance

fix(sdk-logs)!: replace LoggerConfig.disabled with enabled to match the specification #7160

Replace disabled: true with enabled: false, and disabled: false with enabled: true. Loggers remain enabled by default.

🚀 Features

feat(sdk-metrics): stabilize maxExportBatchSize option in PeriodicExportingMetricReader

chore(sdk-logs): mark @opentelemetry/sdk-logs as stable #7143 @trentm

feat(sdk-trace, sdk-logs): add the browser-only disableAutoFlushOnDocumentHide to BatchSpanProcessorOptions and BatchLogRecordProcessorOptions, deprecate BatchSpanProcessorBrowserOptions and BatchLogRecordProcessorBrowserOptions #7140 @overbalance

🐛 Bug Fixes

... (truncated)

Commits

12a5817 chore: prepare next release (#7213)
2a97587 docs: 3.x migration doc edits (#7216)
ebefa76 chore(deps): update dependency eslint to v10.13.0 (#7129)
83b6922 chore(deps): update dependency superagent to v10.4.1 (#7184)
68e9e6e fix(otlp-exporter-base): pick fetch mode from the document origin, not locati...
7d2455e build: lint for unused dependencies with knip (#7200)
5e65e0e fix(core): no longer drop an attribute value that is an object that has `un...
2fbb404 chore(deps): dedupe nx to 23.3.0 (#7205)
c971f52 docs(changelog): trim unreleased entries (#7203)
2516215 feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...
Additional commits viewable in compare view

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

build: handle missing chunk import maps (#23777) (8d7623d)

build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)

bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)

bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)

bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)

bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)

bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)

bundled-dev: normalize served output files (#23684) (df4e02c)

bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)

css: don't fail on a literal % in url() (#23676) (50b382d)

deps: update all non-major dependencies (#23731) (cf80aa5)

deps: update all non-major dependencies (#23826) (77d8373)

deps: update rolldown-related dependencies (#23733) (43f0d05)

deps: update rolldown-related dependencies (#23827) (c2e0418)

optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)

optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)

optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)

optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)

resolve: support subpath imports with multiple # (#23631) (0d86b34)

resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)

server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)

server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

migrate to Oxlint (#23746) (5b73935)

Code Refactoring

deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)

dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)

dev: separate import resolution from URL conversion (#23791) (6116689)

dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)

dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

build: handle missing chunk import maps (#23777) (8d7623d)

build: include preload dependencies to chunk import map hashing (

Bumps the development-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.2` | | [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.300.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.300.0` | | [@opentelemetry/context-async-hooks](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `3.0.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` | Updates `@biomejs/biome` from 2.5.15 to 2.6.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/@biomejs/biome@2.6.2/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.2/packages/@biomejs/biome) Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.222.0 to 0.300.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.300.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.222.0 to 0.300.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.300.0) Updates `@opentelemetry/context-async-hooks` from 2.11.0 to 3.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.11.0...v3.0.0) Updates `vite` from 8.3.4 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc" dependency-version: 0.300.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.300.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@opentelemetry/context-async-hooks" dependency-version: 3.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

🟡 Changes recommended

The gRPC exporter upgrades introduce incompatible OpenTelemetry API requirements and conflict with the retained SDK dependencies and optional peer ranges.

1 open issue

Exporter and SDK OpenTelemetry dependency ranges are incompatible · New

1 file not reviewed

pnpm-lock.yaml: Generated file

What changed in this PR

Updates development dependencies used by the framework’s tooling, telemetry tests, and browser example.

Changes:

Upgrades Biome to 2.6.2 and Vite to 8.3.5.
Upgrades OpenTelemetry gRPC exporters to 0.300.0 and async context management to 3.0.0.
Refreshes lockfile resolutions and transitive dependencies.

File	Description
`pnpm-lock.yaml`	Updates dependency resolutions across the workspace.
`packages/mcp/package.json`	Upgrades the test context-manager dependency.
`packages/core/package.json`	Upgrades the test context-manager dependency.
`packages/agentserver/package.json`	Upgrades both gRPC telemetry exporters.
`package.json`	Upgrades the workspace’s Biome tooling.
`examples/05-browser/package.json`	Upgrades Vite for the browser example.

_{Review effort: Balanced}

+    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.300.0",
+    "@opentelemetry/exporter-trace-otlp-grpc": "^0.300.0",


dependabot Bot added dependencies Usage: [Dependabot PRs], Target: dependency updates javascript Usage: [Dependabot PRs], Target: npm dependency updates labels Oct 26, 2026

Copilot AI balanced review requested due to automatic review settings October 26, 2026 02:22

Copilot started reviewing October 26, 2026 02:22

View session

Copilot AI reviewed Oct 26, 2026

View reviewed changes

Comment thread packages/agentserver/package.json

Comment on lines +87 to +88

"@opentelemetry/exporter-metrics-otlp-grpc": "^0.300.0",

"@opentelemetry/exporter-trace-otlp-grpc": "^0.300.0",

Navigation Menu

Repository navigation

ci: bump the development-dependencies group with 5 updates - #180

ci: bump the development-dependencies group with 5 updates#180
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-ea2eaedcef

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

		"@opentelemetry/exporter-metrics-otlp-grpc": "^0.300.0",
		"@opentelemetry/exporter-trace-otlp-grpc": "^0.300.0",

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.6.2

2.6.2

Minor Changes

2.6.2

Patch Changes

2.6.1

Patch Changes

2.6.0

Minor Changes

experimental/v0.300.0

0.300.0

Summary

💥 Breaking Changes

experimental/v0.300.0

0.300.0

Summary

💥 Breaking Changes

v3.0.0

3.0.0

Summary

💥 Breaking Changes

3.0.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v8.3.5

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

8.3.5 (2026-10-21)

Bug Fixes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited

Loading