[Snyk] Upgrade @opentelemetry/exporter-trace-otlp-http from 0.215.0 to 0.218.0

[nkammah]

Snyk has created this PR to upgrade @opentelemetry/exporter-trace-otlp-http from 0.215.0 to 0.218.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: @opentelemetry/exporter-trace-otlp-http

• 0.218.0 - 2026-05-13
  

  0.218.0

  🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @ pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @ trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @ trentm

  🏠 Internal

  • refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @ david-luna
  • refactor(sdk-logs): use Logger.enabled() within Logger.emit() implementation #6680 @ david-luna
• 0.217.0 - 2026-05-06
  

  0.217.0

  🚀 Features

  • feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @ pichlermarc
  • feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @ MikeGoldsmith
  • feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @ trentm
    • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
    • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
    • An invalid YAML config file will now result in a noop OTel SDK.

  🐛 Bug Fixes

  • fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @ trentm
  • fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @ trentm
  • fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @ trentm
  • fix(configuration): improve handling of enums in generated types #6659 @ trentm
  • fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @ trentm
  • fix(sampler-jaeger-remote): add missing axios dep #6656 @ trentm
  • fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @ homanp
• 0.216.0 - 2026-04-29
  

  0.216.0

  🚀 Features

  • feat(sdk-node): wire attribute_keys from declarative configuration to ViewOptions.attributesProcessors #6427 @ ravitheja4531-cell
  • feat(sdk-node): set TracerProvider in startNodeSDK() #6607 @ maryliag

  🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @ david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @ brunorodmoreira
  • fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @ Maximiliano-Zeballos
  • fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @ trentm
  • fix(web-common): add limit for timeout #6601 @ maryliag
  • fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

  🏠 Internal

  • test(otlp-transformer): add metrics transform benchmark #6628 @ pichlermarc
  • refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @ cjihrig
• 0.215.0 - 2026-04-17
  

  0.215.0

  💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @ pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @ david-luna

  🚀 Features

  • feat(otlp-transformer): add custom protobuf logs serializer #6228 @ pichlermarc
  • feat(otlp-transformer): add custom protobuf logs export response deserializer #6530 @ pichlermarc

  🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @ akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @ kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @ david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @ maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @ maryliag

from @opentelemetry/exporter-trace-otlp-http GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[nkammah]

This is a minor version upgrade for an experimental package. The updates primarily consist of bug fixes and internal improvements.

Key Changes:

• v0.217.0: Replaced the protobufjs dependency with a custom implementation for trace serialization. This is an internal performance enhancement and should not affect the public API.
• v0.216.0: Includes a bug fix for handling IPv6 addresses in the underlying OTLP exporter base package.

No breaking changes are documented for this version range.

Source: OpenTelemetry-JS Experimental Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[github-actions]

Label error. Requires exactly 1 of: automation, breaking, bug, changelog:skip, chore, ci, dependencies, documentation, enhancement, feature, fix, redesign. Found:

[reakaleek]

@copilot rebase PR

[Copilot]

@copilot rebase PR

Rebased onto the latest origin/main and resolved the resulting package conflicts. Updated commit: 716e12c8.