Skip to content

Bump @opentelemetry/core and applicationinsights - #2660

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/multi-2c236f6ce7
Open

Bump @opentelemetry/core and applicationinsights#2660
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/multi-2c236f6ce7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Bumps @opentelemetry/core to 2.10.0 and updates ancestor dependency applicationinsights. These dependencies need to be updated together.

Updates @opentelemetry/core from 1.30.1 to 2.10.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.10.0

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

v2.9.0

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

... (truncated)

Changelog

Sourced from @​opentelemetry/core's changelog.

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

2.8.0

🚀 Features

... (truncated)

Commits
  • 76fa6b5 chore: prepare next release (#6942)
  • 3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
  • be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
  • f6d8fbe chore(deps): lock file maintenance (#6559)
  • 9612732 chore: remove examples/dice from workspaces (#6937)
  • 7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
  • a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
  • af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
  • b9f57c6 chore(deps): update dependency @​types/webpack-env to v1.18.8 (#6877)
  • cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/core since your current version.


Updates applicationinsights from 2.9.8 to 3.15.1

Release notes

Sourced from applicationinsights's releases.

3.15.1

Other Changes

  • Updated @azure/monitor-opentelemetry, @azure/identity, and @opentelemetry/* dependencies.
  • Removed the legacy @azure/functions-old (v3) dependency.
  • Resolved vulnerabilities in dependencies.

Bug Fixes

  • AutoCollectExceptions no longer calls forceFlush per exception and now rate-limits exception telemetry to 50 records/min (emitting a single suppressed-count summary per window). forceFlush still runs on the terminal exit path.

Release PRs

Full Changelog: microsoft/ApplicationInsights-node.js@3.15.0...3.15.1

3.15.0

Breaking Changes

  • Minimum supported Node.js version is now 20.0.0. Node.js 18 is end-of-life (April 2025) and the underlying @azure/monitor-opentelemetry / @azure/monitor-opentelemetry-exporter dependencies require Node >= 20.

Other Changes

  • Updated @azure/monitor-opentelemetry to ^1.18.0 and @azure/monitor-opentelemetry-exporter to ^1.0.0-beta.41.
  • Resolved vulnerabilities in dependencies (added overrides for protobufjs ^8.2.0 and serialize-javascript ^7.0.5).

Bug Fixes

  • Fix memory leak caused by process event listener accumulation when useAzureMonitor() is called multiple times. (#1415)

Release PRs

Full Changelog: microsoft/ApplicationInsights-node.js@3.14.0...3.15.0

3.14.0

microsoft/ApplicationInsights-node.js#1490 microsoft/ApplicationInsights-node.js#1489 microsoft/ApplicationInsights-node.js#1488 microsoft/ApplicationInsights-node.js#1487 microsoft/ApplicationInsights-node.js#1485

3.13.0

microsoft/ApplicationInsights-node.js#1479 microsoft/ApplicationInsights-node.js#1481 microsoft/ApplicationInsights-node.js#1482 microsoft/ApplicationInsights-node.js#1483

... (truncated)

Changelog

Sourced from applicationinsights's changelog.

3.15.1 (2026-06-24)

Other Changes

  • Updated @azure/monitor-opentelemetry, @azure/identity, and @opentelemetry/* dependencies.
  • Bumped @opentelemetry/* (0.220 / 2.9) and @azure/monitor-opentelemetry to resolve dependency audit alerts.
  • Removed the legacy @azure/functions-old (v3) dependency.
  • Resolve vulnerabilities in dependencies.

Bug Fixes

  • AutoCollectExceptions no longer calls forceFlush per exception and now rate-limits exception telemetry to 50 records/min (emitting a single suppressed-count summary per window). forceFlush still runs on the terminal exit path.

3.15.0 (2026-05-13)

Breaking Changes

  • Minimum supported Node.js version is now 20.0.0. Node.js 18 is end-of-life (April 2025) and the underlying @azure/monitor-opentelemetry / @azure/monitor-opentelemetry-exporter dependencies require Node >= 20.

Other Changes

  • Updated @​azure/monitor-opentelemetry and @​azure/monitor-opentelemetry-exporter.
  • Resolve vulnerabilities in dependencies.

Bug Fixes

  • Fix memory leak caused by process event listener accumulation when useAzureMonitor() is called multiple times. (#1415)

3.14.0 (2026-02-24)

Other Changes

  • Update OTel global detection to wait for the customer app to initialize before detection.

3.13.0 (2026-01-16)

Other Changes

  • Add OpenTelemetry global detection to the agent.
  • Add functionality for the TelemetryClient to not use global providers.
  • Resolve vulnerabilities in dependencies.

3.12.1 (2025-11-10)

Other Changes

  • Updated @​azure/monitor-opentelemetry and @​azure/monitor-opentelemetry-exporter.

3.12.0 (2025-09-29)

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 17, 2026
Copilot AI review requested due to automatic review settings June 17, 2026 02:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 17, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@copilot, review and fix the whole PR. this PR is hvaing build issues.

Copilot AI commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

@copilot, review and fix the whole PR. this PR is hvaing build issues.

Addressed the build break in commit 7025d65. I updated src/common/Telemetry.ts for applicationinsights@3.x compatibility (new TelemetryClient import and request payload typing updates), and npm run build now succeeds locally. I also ran npm run test:exe; it fails due to missing prebuilt Windows binary (npm run build:exe) rather than this change.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@copilot please update Changelog file as per changes.

Copilot AI review requested due to automatic review settings June 17, 2026 08:26
@dependabot
dependabot Bot removed the request for review from Copilot June 17, 2026 08:26

Copilot AI commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

@copilot please update Changelog file as per changes.

Updated in 7c64a44: ChangeLog.md now includes Upcoming Release notes for the applicationinsights/@opentelemetry/core bump and the telemetry compatibility update.

Copilot AI changed the title Bump @opentelemetry/core and applicationinsights Bump @opentelemetry/core and applicationinsights (with v3 telemetry compatibility fix) Jun 17, 2026
@md84419

md84419 commented Jul 24, 2026

Copy link
Copy Markdown

@jainakanksha-msft what else is need to get this merged in, please?

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated 1 comment.

Comment thread src/common/Telemetry.ts Outdated
}

private static removeRoleInstance ( envelope: Contracts.EnvelopeTelemetry) : boolean {
private static removeRoleInstance(envelope: any): boolean {
@jainakanksha-msft

Copy link
Copy Markdown
Member

@md84419, thanks for checking in.
We were primarily focused on resolving release-related issues and completing the recent Azurite release, which delayed our review of this PR.
We are now revisiting the change and will validate it against the latest codebase before making a merge decision.
Thanks for your patience and contribution.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot dependabot Bot changed the title Bump @opentelemetry/core and applicationinsights (with v3 telemetry compatibility fix) Bump @opentelemetry/core and applicationinsights Jul 31, 2026
Copilot AI review requested due to automatic review settings July 31, 2026 08:16
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2c236f6ce7 branch from 7c64a44 to f6d1d40 Compare July 31, 2026 08:16

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

Suppressed comments (1)

package.json:24

  • If this repo commits a lockfile (e.g., package-lock.json / yarn.lock / pnpm-lock.yaml), it should be regenerated and included in the same PR when changing dependencies to keep installs reproducible and CI consistent.
    "applicationinsights": "^3.15.1",

@jainakanksha-msft

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.10.0 and updates ancestor dependency [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js). These dependencies need to be updated together.


Updates `@opentelemetry/core` from 1.30.1 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.10.0)

Updates `applicationinsights` from 2.9.8 to 3.15.1
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-node.js/commits/3.15.1)

---
updated-dependencies:
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.8.0
  dependency-type: indirect
- dependency-name: applicationinsights
  dependency-version: 3.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2c236f6ce7 branch from f6d1d40 to f317ad2 Compare July 31, 2026 10:21
Copilot AI review requested due to automatic review settings July 31, 2026 10:21

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

Suppressed comments (1)

package.json:24

  • This is a major-version upgrade (v2 → v3) of the telemetry SDK, which commonly includes breaking changes (e.g., initialization/config options, auto-collection defaults, or context propagation). Please confirm the app’s AI setup is compatible with v3 and that expected telemetry (requests/dependencies/exceptions) still flows correctly in your runtime environment; if there are required config/code changes, capture them in this PR (or link the migration notes) to avoid silently losing observability after deployment.
    "applicationinsights": "^3.15.1",

@jainakanksha-msft

Copy link
Copy Markdown
Member

@copilot

  1. if there is any build issue fix that
  2. Run though test cases and validate the changes fully if it impacts the code
  3. Update the changelist

Copilot AI review requested due to automatic review settings July 31, 2026 10:34
@dependabot
dependabot Bot removed the request for review from Copilot July 31, 2026 10:34

Copilot AI commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

@copilot

  1. if there is any build issue fix that
  2. Run though test cases and validate the changes fully if it impacts the code
    ...

Fixed in the latest commit. Here's a summary of what was done:

  1. Build fix (src/common/Telemetry.ts): Two build errors caused by breaking API changes in applicationinsights v3:

    • Replaced the deep internal import applicationinsights/out/Library/TelemetryClient with the public { TelemetryClient } export from applicationinsights
    • Removed the Contracts import and replaced Contracts.EnvelopeTelemetry (removed in v3) with a minimal type-safe shape { tags?: Record<string, string> }, adding null guards for envelope.tags access
    • Fixed resultCode to string (v3 changed from number to string) and removed source/contextObjects fields not present in v3's RequestTelemetry
  2. Tests: All 782 tests pass with npm test.

  3. ChangeLog: Updated ChangeLog.md under Upcoming Release with a note about the applicationinsights/@opentelemetry/core bump and the v3 telemetry compatibility update.

@md84419

md84419 commented Aug 1, 2026

Copy link
Copy Markdown

@copilot there is still one failing check:

Azurite PR check / Azurite_Windows_Docker (pull_request) Failing after 1m.

Run npm run docker:build-windows
npm run docker:build-windows
shell: C:\Program Files\PowerShell\7\pwsh.EXE -command ". '{0}'"

azurite@3.36.0 docker:build-windows
npm run docker:prebuild && cross-var docker build --no-cache --rm -f "Dockerfile.Windows" -t xstoreazurite.azurecr.io/public/azure-storage/azurite:$npm_package_version . && cross-var docker tag xstoreazurite.azurecr.io/public/azure-storage/azurite:$npm_package_version xstoreazurite.azurecr.io/public/azure-storage/azurite:latest

azurite@3.36.0 docker:prebuild
echo skip

skip
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
Install the buildx component to build images with BuildKit:
https://docs.docker.com/go/buildx/

failed to connect to the docker API at npipe:////./pipe/docker_engine; check if the path is correct and if the daemon is running: open //./pipe/docker_engine: The system cannot find the file specified.
Error: Process completed with exit code 1.

  1. fix the failing check
  2. Run though test cases and validate the changes fully if it impacts the code
  3. Update the changelist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code v3.37.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants