Visitar URL original
[Snyk] Upgrade @opentelemetry/exporter-prometheus from 0.222.0 to 0.300.0 by cld-sec · Pull Request #263 · cloudinary/web-speed-test-server · GitHub
Skip to content

[Snyk] Upgrade @opentelemetry/exporter-prometheus from 0.222.0 to 0.300.0 - #263

Open
cld-sec wants to merge 1 commit into
masterfrom
snyk-upgrade-e1043feecac9927e83dd17039cca08d3
Open

cld-sec wants to merge 1 commit into
masterfrom
snyk-upgrade-e1043feecac9927e83dd17039cca08d3

Conversation

@cld-sec

@cld-sec cld-sec commented Nov 14, 2026

Copy link
Copy Markdown
Contributor

snyk-top-banner

Snyk has created this PR to upgrade @opentelemetry/exporter-prometheus from 0.222.0 to 0.300.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 7 versions ahead of your current version.

  • The recommended version was released 24 days ago.

Breaking Change Risk

Merge Risk: Medium

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @opentelemetry/exporter-prometheus from 0.222.0 to 0.300.0.

See this package in yarn:
@opentelemetry/exporter-prometheus

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/49b18dd8-4139-4a46-8963-719d2e981418?utm_source=github&utm_medium=referral&page=upgrade-pr
@cld-sec

cld-sec commented Nov 14, 2026

Copy link
Copy Markdown
Contributor Author

Merge Risk: Medium

This upgrade of an experimental OpenTelemetry package includes breaking changes related to the runtime environment and metric exposition format.

Key Changes:

  • Node.js Version Requirement: Support for Node.js 14 and 16 has been dropped. The new minimum required versions are ^18.19.0 or >=20.6.0. This is an environment change that requires verification.
  • Behavioral Change: The exporter no longer appends a timestamp to metrics by default. This change was made to better align with the standard Prometheus text-based exposition format but could impact custom parsing scripts or dashboards that relied on the previous behavior.
  • Build & Tooling: Changes have been made to package module resolution (e.g., removal of the esnext entry point), which may require updates to bundler configurations like Webpack or Parcel.

Recommendation: Verify that your runtime environment meets the new Node.js version requirements. Review any custom dashboards, alerts, or metric parsers to ensure they are not negatively impacted by the removal of default timestamps.

Source: OpenTelemetry JS SDK 2.x Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants