[Snyk] Upgrade @opentelemetry/sdk-node from 0.206.0 to 0.208.0

[will0684]

Snyk has created this PR to upgrade @opentelemetry/sdk-node from 0.206.0 to 0.208.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released a month ago.

Release notes

Package name: @opentelemetry/sdk-node

• 0.208.0 - 2025-11-06
  

  0.208.0

  💥 Breaking Changes

  • feat(otlp-exporter-base)!: allow passing an async function to headers option #5994 @ pichlermarc
    • In addition to static headers, OTLP exporters now allow passing an async function that returns headers which will be called before each export. See TSDoc for headers in OTLPExporterConfigBase for details.
    • Breaking changes:
      • (user-facing): headers option in all OTLP exporters now accepts a function that returns a Promise<Record<string, string>> in addition to the existing Record<string, string> type.
      • (user-facing): headers in HttpNodeRequestParameters, FetchTransportParameters, and XhrRequestParameters now only accept async functions.
      • (user-facing): headers in OtlpHttpConfiguration now only accepts async functions.
  • feat(sdk-logs): remove NoopLogRecordProcessor from exports #6079 @ cjihrig
  • feat(api-logs): remove ProxyLogger from exports #6082 @ cjihrig
  • feat(api-logs): remove NOOP_LOGGER_PROVIDER and NoopLoggerProvider from exports #6086 @ cjihrig

  🚀 Features

  • feat(instrumentation): allow error of safeExecuteInTheMiddleAsync to be async #6032 @ JPeer264
  • feat(opentelemetry-configuration): parse logger provider from config file #5995 @ maryliag
  • feat(opentelemetry-configuration): parse meter provider from config file #6000 @ maryliag
  • feat(opentelemetry-configuration): add backup options for certificates and endpoints #6038 @ maryliag
  • feat(opentelemetry-configuration): add backups for compression, timeout, headers #6058 @ JamieDanielson
  • feat(opentelemetry-configuration): set attributes from attribute list from env variables #6043 @ maryliag

  🐛 Bug Fixes

  • fix(instrumentation-fetch): Handling null-body-status responses #6037 @ m0sa

  📚 Documentation

  • doc(sdk-logs): document that SimpleLogRecordProcessor is not for production use #6080 @ cjihrig

  🏠 Internal

  • test(otlp-grpc-exporter-base): increase timeout in flaky test #6042 @ cjihrig
  • test(sdk-node): use process.env consistently in tests #6052 @ cjihrig
  • test(sdk-node): ensure process.env is cleaned up between tests #6066 @ cjihrig
• 0.207.0 - 2025-10-21
  

  0.207.0

  💥 Breaking Changes

  • feat(sdk-node)!: drop lazy-loading of jaeger exporter #5989 @ pichlermarc
    • (user-facing): setting OTEL_TRACE_EXPORTER=jaeger not instantiate a Jaeger exporter anymore, please use OTEL_TRACE_EXPORTER=otlp instead.
      • Jaeger now has native API support for OTLP and Jaeger's Thrift API endpoints have been deprecated
  • feat(otlp-exporter-base): check OTEL_EXPORTER_OTLP_CERTIFICATE and other related env vars when resolving configuration for OTLP HTTP exporters #6015 @ david-luna

  🚀 Features

  • feat(sdk-node): always set up propagtion and context manager #5930
    • using (new NodeSDK).start() will now automatically set up a context management and propagation, even if no Trace SDK
      is initialized.
  • feat(otlp-exporter-base, otlp-grpc-exporter-base): add an option to let an SDK distribution prepend their own user-agent string in HTTP & GRPC exporters #5928 @ david-luna
  • feat(web): add session handling implementation 5173 @ martinkuba

  🐛 Bug Fixes

  • fix(sdk-logs): Fix the batchLogProcessor exporting only upon _scheduledDelayMillis and ignoring maxExportBatchSize #5961 @ JacksonWeber
  • fix(otlp-grpc-exporter-base): fix GRPC exporter not sending the user-agent header #5687 @ david-luna

  🏠 Internal

  • test(opentelemetry-configuration): simplify management of environment variables #6004 @ cjihrig
  • test(opentelemetry-configuration): preserve special process.env behavior #6010 @ cjihrig
  • test(sdk-logs): ensure process.env is cleaned up between tests #6017 @ cjihrig
  • test(otlp-grpc-exporter-base): remove duplicated delete statements #6022 @ cjihrig
  • test(opentelemetry-configuration): ensure process.env is cleaned up after envVariableSubstitution tests #6026 @ cjihrig
• 0.206.0 - 2025-10-06
  

  0.206.0

  🚀 Features

  • feat(otlp-transformer): add span flags support for isRemote property #5910 @ nikhilmantri0902
  • feat(sampler-composite): Added experimental implementations of draft composite sampling spec #5839 @ anuraaga
  • feat(opentelemetry-configuration): add more attributes to config model #5826 @ maryliag
  • feat(opentelemetry-configuration): Parse of Configuration File #5875 @ maryliag
  • feat(opentelemetry-configuration): parse of array objects on configuration file #5947 @ maryliag
  • feat(opentelemetry-configuration): parse of environment variables on configuration file #5947 @ maryliag

  🐛 Bug Fixes

  • fix(instrumentation-http): respect requireParent flag when INVALID_SPAN_CONTEXT is used #4788 @ reberhardt7
  • fix(otlp-transformer): trunc hrTime to int for nanos converting #5924 @ blumamir

  🏠 Internal

  • refactor(otlp-exporter-base): use get*FromEnv() for otlp exporter config. #5583 @ weyert

from @opentelemetry/sdk-node GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Integration Deployment 🚀 - Build Status

Jest Coverage Report
Cypress Coverage Report