[Snyk] Upgrade @opentelemetry/otlp-transformer from 0.203.0 to 0.205.0

[naji247]

Snyk has created this PR to upgrade @opentelemetry/otlp-transformer from 0.203.0 to 0.205.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released 24 days ago.

Release notes

Package name: @opentelemetry/otlp-transformer

• 0.205.0 - 2025-09-10
  

  0.205.0

  💥 Breaking Changes

  • fix(otlp-exporter-base)!: split node and browser config types in two #5917 @ pichlermarc
    • Fixes a bug where Node.js modules would be incorrectly used in the instantiation of a web-targeted exporter
    • Breaking changes:
      • (user-facing) createOtlpHttpExportDelegate(OtlpHttpConfiguration) has been changed to take a different, but identical type OtlpNodeHttpConfiguration to differentiate it from the web-targeted exporters
      • (user-facing) convertLegacyHttpOptions(...) now returns OtlpNodeHttpConfiguration, the returned object's contents remain identical.
      • (user-facing) agentFactory has been dropped from OtlpHttpConfiguration as it is node-specific and is now part of OtlpNodeHttpConfiguration instead
• 0.204.0 - 2025-09-04
  

  0.204.0

  💥 Breaking Changes

  • feat(api-logs)!: Marked private methods as "conventionally private". #5789
  • feat(exporter-otlp-*): support custom HTTP agents #5719 @ raphael-theriault-swi
    • OtlpHttpConfiguration.agentOptions has been removed and functionality has been rolled into OtlpHttpConfiguration.agentFactory
      • (old) { agentOptions: myOptions }
      • (new) { agentFactory: httpAgentFactoryFromOptions(myOptions) }

  🚀 Features

  • feat(otlp-exporter-base): Add fetch transport for fetch-only environments like service workers. #5807
    • when using headers, the Browser exporter now prefers fetch over XMLHttpRequest if present. Sending via XMLHttpRequest will be removed in a future release.
  • feat(opentelemetry-configuration): creation of basic ConfigProvider #5809 @ maryliag
  • feat(opentelemetry-configuration): creation of basic FileConfigProvider #5863 @ maryliag
  • feat(sdk-node): Add support for multiple metric readers via the new metricReaders option in NodeSDK configuration. Users can now register multiple metric readers (e.g., Console, Prometheus) directly through the NodeSDK constructor. The old metricReader (singular) option is now deprecated and will show a warning if used, but remains supported for backward compatibility. Comprehensive tests and documentation have been added. #5760

    • Migration:

      • Before:

        const sdk = new NodeSDK({ metricReader: myMetricReader });

      • After:

        const sdk = new NodeSDK({ metricReaders: [myMetricReader] });

    • Users should migrate to the new metricReaders array option for future compatibility. The old option will be removed in an upcoming experimental version.

  • feat(instrumentation-http): Added support for redacting specific url query string values and url credentials #5743 @ rads-1996

  🐛 Bug Fixes

  • fix(otlp-exporter-base): prioritize esnext export condition as it is more specific #5458
  • fix(otlp-exporter-base): consider relative urls as valid in browser environments #5807
  • fix(instrumentation-fetch): Use ESM version of semconv instead of CJS. Users expecting mixed ESM and CJS modules will now only get ESM modules. #5878 @ overbalance

  🏠 Internal

  • refactor(otlp-exporter-base): use getStringFromEnv instead of process.env #5594 @ weyert
  • chore(sdk-logs): refactored imports #5801 @ svetlanabrennan
  • refactor(instrumentation-grpc): updated path to semconv #5884 @ overbalance
• 0.203.0 - 2025-07-09
  

  0.203.0

  💥 Breaking Changes

  • feat(sdk-logs)!: Removed deprecated LoggerProvider#addLogRecordProcessor() #5764 @ svetlanabrennan
  • feat(sdk-logs)!: Changed LogRecord class to be an interface #5749 @ svetlanabrennan
    • user-facing: LogRecord class is now not exported anymore. A newly exported interface SdkLogRecord is used in its place.
  • feat!: Removed api-events and sdk-events #5737 @ svetlanabrennan

  🏠 Internal

  • chore: Regenerated certs #5752 @ svetlanabrennan
  • refactor(otlp-exporter-base): remove compatibility code that was intended for now unsupported runtime Node.js v14 @ pichlermarc

from @opentelemetry/otlp-transformer GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs