Bump @opentelemetry/core and newrelic - #4992
Conversation
Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.8.0 and updates ancestor dependency [newrelic](https://github.com/newrelic/node-newrelic). These dependencies need to be updated together. Updates `@opentelemetry/core` from 2.2.0 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.8.0) Updates `newrelic` from 13.6.5 to 14.3.3 - [Release notes](https://github.com/newrelic/node-newrelic/releases) - [Changelog](https://github.com/newrelic/node-newrelic/blob/main/NEWS.md) - [Commits](newrelic/node-newrelic@v13.6.5...v14.3.3) --- updated-dependencies: - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: indirect - dependency-name: newrelic dependency-version: 14.3.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Duplication | 0 |
AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.
TIP This summary will be updated as you push new changes.
There was a problem hiding this comment.
Pull Request Overview
This PR updates the newrelic dependency to version 14.3.3. However, there is a significant gap in the implementation: while the PR title and acceptance criteria specify an update for @opentelemetry/core (v2.2.0 to v2.8.0), this package is not included in the package.json changes.
Furthermore, although Codacy quality checks are passing, the update for the New Relic agent constitutes a major version jump (v13 to v14). The lack of accompanying test scenarios to verify telemetry reporting or agent initialization poses a regression risk that should be addressed before merging.
About this PR
- The PR title and acceptance criteria state an update to '@opentelemetry/core' from version 2.2.0 to 2.8.0, but this dependency change is missing from the
package.jsonfile. Please verify if this was intended to be a direct dependency update or if it was mistakenly omitted. - The update for 'newrelic' involves a major version jump from v13 to v14. No tests have been provided to verify that the application still successfully initializes or that telemetry data is reported correctly under the new version.
Test suggestions
- Verify application successfully initializes and reports telemetry data using New Relic agent v14
- Ensure no breaking changes from the @opentelemetry/core v2.7.1 TraceState logic affect current implementation
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify application successfully initializes and reports telemetry data using New Relic agent v14
2. Ensure no breaking changes from the @opentelemetry/core v2.7.1 TraceState logic affect current implementation
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
Bumps @opentelemetry/core to 2.8.0 and updates ancestor dependency newrelic. These dependencies need to be updated together.
Updates
@opentelemetry/corefrom 2.2.0 to 2.8.0Release notes
Sourced from @opentelemetry/core's releases.
... (truncated)
Changelog
Sourced from @opentelemetry/core's changelog.
... (truncated)
Commits
13a035bchore: prepare next release (#6756)4b13587Merge commit from fork71d195cchore(renovate): set minimumReleaseAge to 3 days (#6792)555fca6Update renovate.json to use matchManagers (#6141)b711a81docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...da70402fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)002267bchore: complete the move to the smaller SPDX license header (#6791)056ef9cfeat(sdk-metrics): implement metric reader metrics (#6449)3bd69cefix(configuration): improve environment variable substitution to handle all t...bfbda7cdocs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...Updates
newrelicfrom 13.6.5 to 14.3.3Release notes
Sourced from newrelic's releases.
... (truncated)
Changelog
Sourced from newrelic's changelog.
... (truncated)
Commits
e3f055achore: release v14.3.3 (#4164)f31bbe4fix: Avoid unconditional@opentelemetry/corerequire on agent startup (#4163)3b440f3feat: Collect on-CPU time alongside wall time inCpuProfiler(#4146)b014f82feat: Add internal OTEL API to agent (#4147)8ba64fbdocs: Updated compatibility report (#4160)8a79ec3chore: release v14.3.2 (#4159)ca4a7b0test: Fixed srv-connect DNS patching across mongodb driver versions (#4158)6058cf7docs: Updated compatibility report (#4156)7fd4443fix: Resolved mongodb host details at operation time to support `mongodb+srv:...136f65adocs: Updated compatibility report (#4153)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.