build(deps): bump @opentelemetry/core and @sentry/node

[dependabot]

Bumps @opentelemetry/core to 2.9.0 and updates ancestor dependency @sentry/node. These dependencies need to be updated together.

Updates @opentelemetry/core from 1.30.1 to 2.9.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.9.0

2.9.0

💥 Breaking Changes

• docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
  • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

• feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
  • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
• feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
• feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
  • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
  • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
  • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
• feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

• fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

• perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
• chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
• perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

v2.8.0

2.8.0

🚀 Features

• feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @​mcollina
• feat(sdk-metrics): implement metric reader self-observability metrics #6449 @​anuraaga
• feat(core): add hrTimeToSeconds #6449 @​anuraaga

🐛 Bug Fixes

• fix(core): limit processing of incoming "baggage" header to 8192 bytes @​pichlermarc

v2.7.1

2.7.1

🐛 Bug Fixes

• fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @​david-luna

... (truncated)

Changelog

Sourced from @​opentelemetry/core's changelog.

2.9.0

💥 Breaking Changes

• docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
  • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

• feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
  • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
• feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
• feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
  • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
  • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
  • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
• feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

• fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

• perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
• chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
• perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

2.8.0

🚀 Features

• feat(sdk-trace-base): pretty-print SpanImpl, Tracer, and BasicTracerProvider via util.inspect so they render through diag and console.log #6690 @​mcollina
• feat(sdk-metrics): implement metric reader self-observability metrics #6449 @​anuraaga
• feat(core): add hrTimeToSeconds #6449 @​anuraaga

🐛 Bug Fixes

• fix(core): limit processing of incoming "baggage" header to 8192 bytes @​pichlermarc

2.7.1

🐛 Bug Fixes

• fix(core, api): defer trace state validation. Deprecate trace state implementation in api #6459 @​david-luna
  • important: this bug fix may be breaking for certain uses of TraceState
    • set now returns the same TraceState instance if key/value are invalid or makes the while trace state invalid.
    • unset now returns the same TraceState instance if key is not present.
    • best-effort parsing of invalid TraceStates has changed: when multiple keys with the same name are present, the most recent one will win.

... (truncated)

Commits

• 40d67b7 chore: prepare next release (#6869)
• b1c196d Merge commit from fork
• d375c08 fix(instrumentation,instrumentation-http): fix codecov under-reporting (#6867)
• d61ab5f perf(sdk-metrics): optionally capture active context for sync instruments (#6...
• 9e6475e fix(core): guard timeInputToHrTime against clock-skew misclassification (#677...
• c989308 feat(sdk-node): wire up tracer_provider.sampler from declarative config (#6847)
• dddbc0e feat(sdk-trace): add AlwaysRecordSampler (#6168)
• 991434c chore(deps): update dependency @​bufbuild/buf to v1.71.0 (#6863)
• 69303d0 chore(deps): update all patch versions (#6862)
• 6690b03 chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from d...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/core since your current version.

Updates @sentry/node from 9.47.1 to 10.63.0

Release notes

Sourced from @​sentry/node's releases.

10.63.0

• feat(browser): Add url.full attribute to resource spans (#21846)
• feat(core): Add extendIntegration method (#21759)
• feat(core): Add isTracingSuppressed to the async context strategy (#21785)
• feat(core): Pass normalizedRequest to the sampling context for root spans (#21833)
• feat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (#21786)
• feat(node): Expose channel-based, streamlined fastifyIntegration (#21706)
• fix(browser): Defer sending session envelope until browser is idle (#21844)
• fix(core): Improve waiting for tracing channel bindings (#21815)
• fix(core): Serialize streamed span status message to sentry.status.message attribute (#21811)
• fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#21141)
• fix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (#21848)
• fix(tanstackstart-react): Drop server transactions for tunnel route requests (#21769)

• chore: Add external contributor to CHANGELOG.md (#21832)
• chore: Hoist transitive imports for bundles (#21858)
• chore: Mark http.query/http.fragment stripping for v11 url.query migration (#21852)
• docs: Use Cloudflare nodejs_compat flag (#21659)
• feat(server-utils): Add lru-memoizer diagnostics-channel integration (#21786)
• feat(server-utils): Expose channel-based, streamlined fastifyIntegration (#21706)
• feat(server-utils): Restore caller context for callback tracing channels (#21863)
• ref(core): Move spanStreamingIntegration setup into ServerRuntimeClient (#21814)
• ref(node): Infer orchestrion integration names (#21834)
• ref(node): Move node-fetch instrumentation away from InstrumentBase (#21778)
• ref(node): Streamline Prisma instrumentation (v6 and v7) (#21819)
• ref(node): Streamline vendored mysql instrumentation (#21568)
• ref(server-utils): Ensure ts3.8 has diagnostics channel shim (#21845)
• ref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (#21865)
• ref(server-utils): Set error attributes on span and simplify error info extraction (#21822)
• test: Introduce .unordered in node-integration-tests (#21697)
• test(cloudflare): Align CF types and compat flags (#21835)
• test(e2e/hono): Isolate request-data extraction tests onto a dedicated route (#21869)
• test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (#21868)
• test(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (#21870)
• test(node-integration-tests): Retry transient docker compose up failures (#21860)
• test(nuxt): Test mysql instrumentation with orchestrion bundler plugin (#21782)

Work in this release was contributed by @​suzunn. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	26.97 KB
@​sentry/browser - with treeshaking flags	25.44 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.63.0

• feat(browser): Add url.full attribute to resource spans (#21846)
• feat(core): Add extendIntegration method (#21759)
• feat(core): Add isTracingSuppressed to the async context strategy (#21785)
• feat(core): Pass normalizedRequest to the sampling context for root spans (#21833)
• feat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (#21786)
• feat(node): Expose channel-based, streamlined fastifyIntegration (#21706)
• fix(browser): Defer sending session envelope until browser is idle (#21844)
• fix(core): Improve waiting for tracing channel bindings (#21815)
• fix(core): Serialize streamed span status message to sentry.status.message attribute (#21811)
• fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#21141)
• fix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (#21848)
• fix(tanstackstart-react): Drop server transactions for tunnel route requests (#21769)

• chore: Add external contributor to CHANGELOG.md (#21832)
• chore: Hoist transitive imports for bundles (#21858)
• chore: Mark http.query/http.fragment stripping for v11 url.query migration (#21852)
• docs: Use Cloudflare nodejs_compat flag (#21659)
• feat(server-utils): Add lru-memoizer diagnostics-channel integration (#21786)
• feat(server-utils): Expose channel-based, streamlined fastifyIntegration (#21706)
• feat(server-utils): Restore caller context for callback tracing channels (#21863)
• ref(core): Move spanStreamingIntegration setup into ServerRuntimeClient (#21814)
• ref(node): Infer orchestrion integration names (#21834)
• ref(node): Move node-fetch instrumentation away from InstrumentBase (#21778)
• ref(node): Streamline Prisma instrumentation (v6 and v7) (#21819)
• ref(node): Streamline vendored mysql instrumentation (#21568)
• ref(server-utils): Ensure ts3.8 has diagnostics channel shim (#21845)
• ref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (#21865)
• ref(server-utils): Set error attributes on span and simplify error info extraction (#21822)
• test: Introduce .unordered in node-integration-tests (#21697)
• test(cloudflare): Align CF types and compat flags (#21835)
• test(e2e/hono): Isolate request-data extraction tests onto a dedicated route (#21869)
• test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (#21868)
• test(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (#21870)
• test(node-integration-tests): Retry transient docker compose up failures (#21860)
• test(nuxt): Test mysql instrumentation with orchestrion bundler plugin (#21782)

Work in this release was contributed by @​suzunn. Thank you for your contribution!

10.62.0

Important Changes

• feat(server-runtimes): Add v7 support for vercelAiIntegration (#21613)

... (truncated)

Commits

• 2362e9f release: 10.63.0
• 5b51d5e Merge pull request #21874 from getsentry/prepare-release/10.63.0
• 4e16503 meta(changelog): Update changelog for 10.63.0
• 690f778 test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (#21...
• 429cdaf test(node-integration-tests): Fix flaky postgresjs basic transaction/error or...
• 35998e6 test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ...
• 88e7ad5 feat(server-utils): Expose channel-based, streamlined fastifyIntegration (#...
• e316151 ref(server-utils): Move mysql orchestrion integration onto bindTracingChannel...
• e7c24a5 feat(server-utils): Restore caller context for callback tracing channels (#21...
• bf21b16 fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#...
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	Jul 6, 2026 4:56pm