Skip to content

build(deps): Bump the service group in /service with 11 updates - #72

Merged
alexanderilyin merged 1 commit into
mainfrom
dependabot/npm_and_yarn/service/service-77508498c8
Oct 15, 2026
Merged

alexanderilyin merged 1 commit into
mainfrom
dependabot/npm_and_yarn/service/service-77508498c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the service group in /service with 11 updates:

Package From To
@fastify/swagger 9.9.1 9.9.2
@fastify/swagger-ui 6.1.1 6.1.2
@fastify/type-provider-typebox 6.1.0 6.2.0
@opentelemetry/auto-instrumentations-node 0.80.0 0.81.0
@opentelemetry/exporter-trace-otlp-http 0.222.0 0.223.0
@opentelemetry/resources 2.11.0 2.12.0
@opentelemetry/sdk-node 0.222.0 0.223.0
@sentry/node 11.4.0 11.6.0
@cucumber/cucumber 13.2.1 13.3.0
@redocly/cli 2.57.0 2.62.1
@types/node 26.6.4 26.6.5

Updates @fastify/swagger from 9.9.1 to 9.9.2

Release notes

Sourced from @​fastify/swagger's releases.

v9.9.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-swagger@v9.9.1...v9.9.2

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/swagger since your current version.


Updates @fastify/swagger-ui from 6.1.1 to 6.1.2

Release notes

Sourced from @​fastify/swagger-ui's releases.

v6.1.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-swagger-ui@v6.1.1...v6.1.2

Commits
  • 1e67864 Bumped v6.1.2
  • ed92262 fix: run prepare in release:build script
  • a02606a chore: update package.json (#296)
  • caa809d ci: enable trusted publishing releases (#294)
  • 1c82bef Add security note about apiKey in README (#293)
  • 7843639 chore: bump @​apidevtools/swagger-parser from 12.1.0 to 13.0.0 (#292)
  • 9e9c234 docs: clarify baseDir, indexPrefix and multiple specifications
  • d973563 chore(.npmrc): add min-release-age
  • 226cfea chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#288)
  • 938cea8 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#287)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/swagger-ui since your current version.


Updates @fastify/type-provider-typebox from 6.1.0 to 6.2.0

Release notes

Sourced from @​fastify/type-provider-typebox's releases.

v6.2.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-type-provider-typebox@v6.1.0...v6.2.0

Commits
  • 7516e74 Bumped v6.2.0
  • ffb3b89 ci: enable trusted publishing releases
  • a8ebd1b docs: add JavaScript + JSDoc usage section
  • 42fbdb0 chore(.npmrc): add min-release-age (#292)
  • cecd2c2 chore: bump fastify/workflows/.github/workflows/nested-quality.yml (#294)
  • 7d754c2 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#293)
  • 4a7b1c4 chore: update dependabot.yml
  • 36d0e2c chore: bump actions/setup-node from 6.4.0 to 7.0.0 (#289)
  • 6feb5dd ci: pin actions to commit-hash
  • b50efc7 ci(ci): add node 26 to test matrix (#280)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/type-provider-typebox since your current version.


Updates @opentelemetry/auto-instrumentations-node from 0.80.0 to 0.81.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.81.0

0.81.0 (2026-10-06)

Features

  • deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.77.0 to ^0.78.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-express bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.41.0 to ^0.42.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.5.0 to ^0.6.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-net bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.47.0 to ^0.48.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-router bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.41.0 to ^0.42.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.81.0 (2026-10-06)

Features

  • deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.77.0 to ^0.78.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.38.0 to ^0.39.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-express bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.41.0 to ^0.42.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.5.0 to ^0.6.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.31.0 to ^0.32.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-net bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.20.0 to ^0.21.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.47.0 to ^0.48.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.74.0 to ^0.75.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.70.0 to ^0.71.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-router bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-runtime-node bumped from ^0.35.0 to ^0.36.0
      • @​opentelemetry/instrumentation-socket.io bumped from ^0.69.0 to ^0.70.0
      • @​opentelemetry/instrumentation-tedious bumped from ^0.41.0 to ^0.42.0
      • @​opentelemetry/instrumentation-undici bumped from ^0.32.0 to ^0.33.0

... (truncated)

Commits
  • cc263ac chore: release main (#3719)
  • 36fcb9c feat(deps): update deps matching '@opentelemetry/*' (#3804)
  • 2729b78 chore: revert "chore!: raise minimum supported Node.js to 22.15.0, dropping 1...
  • 36dffd2 chore!: raise minimum supported Node.js to 22.15.0, dropping 18 and 20 suppor...
  • See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

  • chore(web-common)!: clean up and deprecate network span utils #7114
    • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
    • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

  • refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/resources from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.12.0

2.12.0

🚀 Features

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Changelog

Sourced from @​opentelemetry/resources's changelog.

2.12.0

🏠 Internal

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/sdk-node from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

  • chore(web-common)!: clean up and deprecate network span utils #7114
    • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
    • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

  • refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @sentry/node from 11.4.0 to 11.6.0

Release notes

Sourced from @​sentry/node's releases.

11.6.0

Important Changes

  • feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

    The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

    import * as Sentry from '@sentry/nextjs/cloudflare';
    import handler from './.open-next/worker.js';
    export default Sentry.withSentry(
    env => ({
    dsn: env.SENTRY_DSN,
    tracesSampleRate: 1.0,
    }),
    handler,
    );

  • feat(server-utils): Add instrumentation for pi-durable (#24993)

    The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

  • fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

    When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

  • feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
  • feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
  • fix(browser): Check for clock drift on page lifecycle events (#25091)
  • fix(core): Exclude attachments from internal exception events (#25160)
  • fix(effect): Convert Effect span times to the Sentry clock (#24972)
  • fix(effect): Detect HTTP spans named after the request method (#25159)
  • fix(node): Register Vercel keep-alive listeners once (#25146)
  • fix(replay): Place CLS and INP web vitals at the right time (#24990)
  • fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
  • fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)
  • chore: Add external contributor to CHANGELOG.md (#25136)
  • chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
  • chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)
  • feat(cloudflare): Wrap vinext Worker entries with @sentry/nextjs/cloudflare (#25000)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

11.6.0

Important Changes

  • feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

    The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

    import * as Sentry from '@sentry/nextjs/cloudflare';
    import handler from './.open-next/worker.js';
    export default Sentry.withSentry(
    env => ({
    dsn: env.SENTRY_DSN,
    tracesSampleRate: 1.0,
    }),
    handler,
    );

  • feat(server-utils): Add instrumentation for pi-durable (#24993)

    The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

  • fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

    When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

  • feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
  • feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
  • fix(browser): Check for clock drift on page lifecycle events (#25091)
  • fix(core): Exclude attachments from internal exception events (#25160)
  • fix(effect): Convert Effect span times to the Sentry clock (#24972)
  • fix(effect): Detect HTTP spans named after the request method (#25159)
  • fix(node): Register Vercel keep-alive listeners once (#25146)
  • fix(replay): Place CLS and INP web vitals at the right time (#24990)
  • fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
  • fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)
  • chore: Add external contributor to CHANGELOG.md (#25136)
  • chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
  • chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)

... (truncated)

Commits
  • 3c0c830 release: 11.6.0
  • 13743e9 Merge pull request #25184 from getsentry/prepare-release/11.6.0
  • 3605c50 chore(size-limit): Bump @​sentry/node size limits
  • 53ae996 meta(changelog): Update changelog for 11.6.0
  • e99e6e1 feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • 2fdcb23 test(e2e): Add Mastra Jev classifier test to node-mastra (#25115)
  • 5bb9a68 feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate span...
  • 221dd86 test(e2e): Add a cloudflare-pi-durable end-to-end application (#25022)
  • 966e1ff feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • b70f6bb test(e2e): Add a node-pi-durable end-to-end application (#24994)
  • Additional commits viewable in compare view

Updates @cucumber/cucumber from 13.2.1 to 13.3.0

Release notes

Sourced from @​cucumber/cucumber's releases.

v13.3.0

Added

  • Support steps with both a data table and a doc string (#2967)

Changed

  • Deprecate willBeRetried in After hook (#2968)
Changelog

Sourced from @​cucumber/cucumber's changelog.

[13.3.0] - 2026-10-05

Added

  • Support steps with both a data table and a doc string (#2967)

Changed

  • Deprecate willBeRetried in After hook (#2968)
Commits

Updates @redocly/cli from 2.57.0 to 2.62.1

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.62.1

Patch Changes

  • Fixed the project clone command so that Git keeps finding its credential helper after a clone run with npx or pnpm dlx.

@​redocly/cli@​2.62.0

Minor Changes

  • Added support for in: querystring parameters to the experimental drift command. The command validates the whole query string against the parameter's schema, instead of reporting every query key as undocumented. In --coverage, each key of a form-urlencoded querystring schema counts as a separate parameter.
  • Added the early access project clone command to work with a Redocly-hosted Reunite project as a Git repository.

Patch Changes

  • Fixed the schema-consistency rule of the drift command so that a required readOnly property in a parameter schema is no longer reported as missing from the request.
  • Updated @​redocly/reunite-integration to v2.62.0.

@​redocly/cli@​2.61.0

Minor Changes

  • Added pass-through stream request bodies to the generated TypeScript, Python, Go, and PHP clients. A stream body is sent as is in one attempt, and the caller's Content-Type wins over the one in the API description.

Patch Changes

  • Added a deprecation warning for Node.js 20.x. Update to Node.js 22.12.0 or higher.
  • Updated @modelcontextprotocol/sdk to 1.32.1 to resolve GHSA-6qxp-vccf-f47h.
  • Updated @​redocly/client-generator to v0.5.0.
  • Updated @​redocly/openapi-core to v2.61.0.
  • Updated @​redocly/reunite-integration to v2.61.0.

@​redocly/cli@​2.60.0

Minor Changes

  • Added the --file-name-conflicts-severity option for the split command to control how file name conflicts are reported.

Patch Changes

  • Fixed an issue where split lost content when two components, paths, webhooks, channels, operations, or code samples got the same file name.

    Warning: split output may differ from older releases: when several names would share one file, each later file now gets a -n suffix, where n is its order, for example user-2.yaml next to User.yaml.

@​redocly/cli@​2.59.0

Minor Changes

  • Improved redocly recheck to lint the description fields of API descriptions. Findings report the source line and column. You can suppress the findings by file, rule, and pointer, or adjust rules for descriptions only.

... (truncated)

Commits
  • 5daf0a4 chore: 🔖 release new versions (#3229)
  • 6a74418 fix: keep the credential helper of project clone working after npx exits (#...
  • fdffe75 chore: 🔖 release new versions (#3225)
  • 78fae8a feat(drift): support querystring parameters in the schema-consistency rule (#...
  • 6e90032 feat: add the project clone command for Redocly-hosted projects (#3174)
  • 3c0793b chore: 🔖 release new versions (#3216)
  • f31823a chore: stamp the ejected example with the released client-generator version (...
  • 1435754 feat(client-generator): pass stream request bodies through in the generated c...
  • 25dcdf2 feat(cli): warn th...

    Description has been truncated

Bumps the service group in /service with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.9.1` | `9.9.2` |
| [@fastify/swagger-ui](https://github.com/fastify/fastify-swagger-ui) | `6.1.1` | `6.1.2` |
| [@fastify/type-provider-typebox](https://github.com/fastify/fastify-type-provider-typebox) | `6.1.0` | `6.2.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.80.0` | `0.81.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `11.4.0` | `11.6.0` |
| [@cucumber/cucumber](https://github.com/cucumber/cucumber-js) | `13.2.1` | `13.3.0` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.57.0` | `2.62.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |


Updates `@fastify/swagger` from 9.9.1 to 9.9.2
- [Release notes](https://github.com/fastify/fastify-swagger/releases)
- [Commits](fastify/fastify-swagger@v9.9.1...v9.9.2)

Updates `@fastify/swagger-ui` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/fastify/fastify-swagger-ui/releases)
- [Commits](fastify/fastify-swagger-ui@v6.1.1...v6.1.2)

Updates `@fastify/type-provider-typebox` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/fastify/fastify-type-provider-typebox/releases)
- [Commits](fastify/fastify-type-provider-typebox@v6.1.0...v6.2.0)

Updates `@opentelemetry/auto-instrumentations-node` from 0.80.0 to 0.81.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.81.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0)

Updates `@opentelemetry/resources` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `@opentelemetry/sdk-node` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0)

Updates `@sentry/node` from 11.4.0 to 11.6.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.4.0...11.6.0)

Updates `@cucumber/cucumber` from 13.2.1 to 13.3.0
- [Release notes](https://github.com/cucumber/cucumber-js/releases)
- [Changelog](https://github.com/cucumber/cucumber-js/blob/main/CHANGELOG.md)
- [Commits](cucumber/cucumber-js@v13.2.1...v13.3.0)

Updates `@redocly/cli` from 2.57.0 to 2.62.1
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.57.0...@redocly/cli@2.62.1)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@fastify/swagger"
  dependency-version: 9.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: service
- dependency-name: "@fastify/swagger-ui"
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: service
- dependency-name: "@fastify/type-provider-typebox"
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@sentry/node"
  dependency-version: 11.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@cucumber/cucumber"
  dependency-version: 13.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@redocly/cli"
  dependency-version: 2.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: service
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: service
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 29aa87a1-bcfa-48a8-8069-d5e9399a4af1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@alexanderilyin
alexanderilyin merged commit 8e6af65 into main Oct 15, 2026
10 checks passed
@alexanderilyin
alexanderilyin deleted the dependabot/npm_and_yarn/service/service-77508498c8 branch October 15, 2026 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant