Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade @opentelemetry/instrumentation-http from 0.23.0 to 0.24.0 #2

Merged
merged 2 commits into from
Nov 2, 2021
Merged

[Snyk] Upgrade @opentelemetry/instrumentation-http from 0.23.0 to 0.24.0 #2

merged 2 commits into from
Nov 2, 2021

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade @opentelemetry/instrumentation-http from 0.23.0 to 0.24.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 12 versions ahead of your current version.
  • The recommended version was released 3 months ago, on 2021-07-28.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269		 482/1000
Why? Proof of Concept exploit, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @opentelemetry/instrumentation-http
  • 0.24.0 - 2021-07-28

    💥 Breaking Change

    • opentelemetry-core, opentelemetry-exporter-jaeger, opentelemetry-exporter-zipkin, opentelemetry-node, opentelemetry-resource-detector-aws, opentelemetry-resource-detector-gcp, opentelemetry-resources, opentelemetry-semantic-conventions, opentelemetry-web
      • #2345 feat: updated spec to v1.5.0 and renamed resource class (@ weyert)

    🚀 (Enhancement)

    • opentelemetry-exporter-collector-proto, opentelemetry-exporter-collector
    • opentelemetry-instrumentation-http
      • #2332 feat(@ opentelemetry-instrumentation-http): support adding custom attributes before a span is started (@ echoontheway)
      • #2349 fix(instrumentation-http): set outgoing request attributes on start span (@ blumamir)
    • opentelemetry-web
      • #2343 feat(opentelemetry-web): capture decodedBodySize / http.response_content_length_uncompressed (@ t2t2)
    • opentelemetry-instrumentation
      • #2309 chore: add includePrerelease option to instrumentation config (@ dyladan)

    🐛 (Bug Fix)

    • opentelemetry-exporter-collector
    • opentelemetry-exporter-collector-grpc
      • #2322 fix(@ opentelemetry/exporter-collector-grpc) regression from #2130 when host specified without protocol (@ lizthegrey)
    • opentelemetry-exporter-collector-proto

    📚 (Refine Doc)

    🏠 (Internal)

    • Other
    • opentelemetry-exporter-collector-grpc, opentelemetry-exporter-jaeger, opentelemetry-instrumentation, opentelemetry-node, opentelemetry-sdk-node, opentelemetry-shim-opentracing, opentelemetry-tracing, opentelemetry-web
      • #2351 style: use single quotes everywhere and add a rule to eslint (@ blumamir)
    • template

    Committers: 18

  • 0.23.1-alpha.28 - 2021-07-27
  • 0.23.1-alpha.27 - 2021-07-27
  • 0.23.1-alpha.24 - 2021-07-25
  • 0.23.1-alpha.23 - 2021-07-23
  • 0.23.1-alpha.18 - 2021-07-02
  • 0.23.1-alpha.17 - 2021-06-30
  • 0.23.1-alpha.16 - 2021-07-17
  • 0.23.1-alpha.15 - 2021-07-17
  • 0.23.1-alpha.14 - 2021-07-17
  • 0.23.1-alpha.12 - 2021-07-17
  • 0.23.1-alpha.3 - 2021-07-05
  • 0.23.0 - 2021-06-30

    🚀 (Enhancement)

    • opentelemetry-shim-opentracing
    • opentelemetry-exporter-collector-grpc
      • #2304 feat: otlp-grpc exporter uses headers environment variables (@ vreynolds)
    • opentelemetry-propagator-b3
    • opentelemetry-core, opentelemetry-instrumentation-fetch, opentelemetry-instrumentation-xml-http-request, opentelemetry-web
      • #2226 fix(xhr): make performance observer work with relative urls (@ mhennoch)

    📚 (Refine Doc)

    • Other
    • opentelemetry-sdk-node
    • opentelemetry-exporter-jaeger, opentelemetry-exporter-zipkin, opentelemetry-sdk-node
    • opentelemetry-resources

    🏠 (Internal)

    • opentelemetry-context-async-hooks, opentelemetry-context-zone-peer-dep, opentelemetry-web
    • Other

    Committers: 9

from @opentelemetry/instrumentation-http GitHub release notes
Commit messages
Package name: @opentelemetry/instrumentation-http
  • fd2410c chore: 0.24.0 release proposal (#2377)
  • 534e0d1 Additional website docs updates (#2344)
  • ec88344 Support gzip compression for node exporter collector (#2337)
  • d8fbedd chore(deps): update dependency sinon to v11 (#2237)
  • 1bbd1dc feat(@ opentelemetry-instrumentation-http): support adding custom attributes before a span is started (#2332)
  • 9c10bd7 fix: fixup aws detector readme (#2379)
  • e089984 docs: add quickstart code example (#2365)
  • 3bc3452 feat: updated spec to v1.5.0 and renamed resource class (#2345)
  • 884d20a chore(deps): update all non-major dependencies (#2372)
  • b613a2a chore: adding Rauno56 to js approvers (#2366)
  • 39c6ea5 examples opentelemetry-api version fix (#2358)
  • cb06b78 fix: headers are appended to existing one (open-telemetry#2335) (#2357)
  • c55142f fix(@ opentelemetry/exporter-collector-grpc) regression from #2130 when host specified without protocol (#2322)
  • 11719ed style: use single quotes everywhere and add a rule to eslint (#2351)
  • 56de304 chore: use typedoc to build sdk reference (#2308)
  • cef7ce9 docs: updates README.md for @ opentelemetry/propagator-b3 (#2342)
  • b67ca05 chore(deps): update all non-major dependencies (#2339)
  • 0e3f03f fix(instrumentation-http): set outgoing request attributes on start span (#2349)
  • 5aabcc7 feat(opentelemetry-web): capture decodedBodySize / http.response_content_length_uncompressed (#2343)
  • 2355717 chore: add includePrerelease option to instrumentation config (#2309)
  • 90e941a chore: ignore backcompat in renovate (#2350)
  • f9ab4a3 replaced word plugin with instrumentation (#2352)
  • 68454a4 Change default HTTP exporter port to 55681 (#2331)
  • 6e82726 chore: ignore @ types/node in backcompat (#2311)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@AnguIar AnguIar merged commit 7fb6bf6 into master Nov 2, 2021
@AnguIar AnguIar deleted the snyk-upgrade-69cf98a14b855665ba21bd2772dcbc76 branch November 2, 2021 14:16
ronenkapelian added a commit that referenced this pull request Mar 8, 2023
@ronenkapelian
fix: pr notes for tests #2
235bf00
asafMasa pushed a commit that referenced this pull request Mar 8, 2023
@ronenkapelian
Add features collections api (#55)
490341b 
* feat: multi resolution api

* feat: draft version of new ROI exporting API - No tests!

* chore: pr notes + finalizing implementation

* fix: lint fix

* fix: log level for polling

* fix: first pr note about files name

* fix: pr round 2 notes

* fix: lint fix

* fix: logging for pr notes

* fix: log for callback

* fix: logs

* fix: improve logs for pr request

* fix: log notes for existing job

* fix: linter

* fix: pr notes + refactoring

* fix: logs on getmap api

* test: integration + unit for ROI API

* fix: prettier

* fix: pr notes for testing

* fix: pr notes for tests #2

* fix: pr notes #3

* fix: prittier
ronenkapelian added a commit that referenced this pull request Mar 26, 2023
@ronenkapelian
fix: pr notes #2
dc07406
ronenkapelian added a commit that referenced this pull request Mar 26, 2023
@ronenkapelian
feat: API changes for integration + helm improvement (MAPCO-2931) (#62)
bda2343 
* chore: API changes for integration + helm improvement

* fix: adding description to naive cache response spec

* fix: pr notes

* fix: pr notes #2
ronenkapelian added a commit that referenced this pull request Jun 5, 2023
@ronenkapelian
chore: artifact defenition integration #2
633f432
ronenkapelian added a commit that referenced this pull request Jun 11, 2023
@ronenkapelian
feat: Semi integration mutual export (#69)
ec1766d 
* chore: wip

* chore: integration #1

* chore: artifact defenition integration #2

* chore: artifact implementation + callback after job closing

* chore: expirationDate default

* fix: uri-> url in artifact

* feat: pre final integration

* feat: final commit for PR, with tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@snyk-bot @AnguIar