Skip to content

meta: bump the vercel group across 1 directory with 6 updates#8834

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vercel-206c32a9c1
Open

meta: bump the vercel group across 1 directory with 6 updates#8834
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vercel-206c32a9c1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Bumps the vercel group with 6 updates in the / directory:

Package From To
turbo 2.8.17 2.9.6
@opentelemetry/api-logs 0.213.0 0.215.0
@opentelemetry/instrumentation 0.213.0 0.215.0
@opentelemetry/sdk-logs 0.213.0 0.215.0
@vercel/otel 2.1.1 2.1.2
@next/eslint-plugin-next 16.2.1 16.2.4

Updates turbo from 2.8.17 to 2.9.6

Release notes

Sourced from turbo's releases.

Turborepo v2.9.6

What's Changed

create-turbo

Examples

Changelog

Full Changelog: vercel/turborepo@v2.9.5...v2.9.6

Turborepo v2.9.6-canary.3

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.9.6-canary.2...v2.9.6-canary.3

Turborepo v2.9.6-canary.2

What's Changed

create-turbo

Examples

Changelog

Full Changelog: vercel/turborepo@v2.9.6-canary.1...v2.9.6-canary.2

Turborepo v2.9.6-canary.1

What's Changed

@​turbo/telemetry

... (truncated)

Commits

Updates @opentelemetry/api-logs from 0.213.0 to 0.215.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @​maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

  • feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @​maryliag
  • refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @​overbalance
  • fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @​overbalance
  • fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @​dyladan
  • fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @​gotgenes

🏠 Internal

Commits
  • a0476ee chore: prepare next release (#6603)
  • 6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
  • 840f3d4 chore: re-arrange misplaced changelog entries (#6604)
  • 2da8d39 feat(configuration): refactoring config loader to print warning message for b...
  • 401af13 fix(deps): update dependency protobufjs to v8 (#6602)
  • 36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
  • 8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
  • f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
  • 394eeb0 chore: update changelog script (#6586)
  • 36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.213.0 to 0.215.0

Release notes

Sourced from @​opentelemetry/instrumentation's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @​maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

  • feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @​maryliag
  • refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @​overbalance
  • fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @​overbalance
  • fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @​dyladan
  • fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @​gotgenes

🏠 Internal

Commits
  • a0476ee chore: prepare next release (#6603)
  • 6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
  • 840f3d4 chore: re-arrange misplaced changelog entries (#6604)
  • 2da8d39 feat(configuration): refactoring config loader to print warning message for b...
  • 401af13 fix(deps): update dependency protobufjs to v8 (#6602)
  • 36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
  • 8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
  • f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
  • 394eeb0 chore: update changelog script (#6586)
  • 36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
  • Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.213.0 to 0.215.0

Release notes

Sourced from @​opentelemetry/sdk-logs's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @​maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

  • feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @​maryliag
  • refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @​overbalance
  • fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @​overbalance
  • fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @​dyladan
  • fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @​gotgenes

🏠 Internal

Commits
  • a0476ee chore: prepare next release (#6603)
  • 6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
  • 840f3d4 chore: re-arrange misplaced changelog entries (#6604)
  • 2da8d39 feat(configuration): refactoring config loader to print warning message for b...
  • 401af13 fix(deps): update dependency protobufjs to v8 (#6602)
  • 36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
  • 8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
  • f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
  • 394eeb0 chore: update changelog script (#6586)
  • 36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
  • Additional commits viewable in compare view

Updates @vercel/otel from 2.1.1 to 2.1.2

Release notes

Sourced from @​vercel/otel's releases.

@​vercel/otel@​2.1.2

Patch Changes

Commits

Updates @next/eslint-plugin-next from 16.2.1 to 16.2.4

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.2.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • chore: Bump reqwest to 0.13.2 (Fixes Google Fonts with Turbopack for Windows on ARM64) (#92713)
  • Turbopack: fix filesystem watcher config not applying follow_symlinks(false) (#92631)
  • Scope Safari ?ts= cache-buster to CSS/font assets only (Pages Router) (#92580)
  • Compiler: Support boolean and number primtives in next.config defines (#92731)
  • turbo-tasks: Fix recomputation loop by allowing cell cleanup on error during recomputation (#92725)
  • Turbopack: shorter error for ChunkGroupInfo::get_index_of (#92814)
  • Turbopack: shorter error message for ModuleBatchesGraph::get_entry_index (#92828)
  • Adding more system info to the 'initialize project' trace (#92427)

Credits

Huge thanks to @​Badbird5907, @​lukesandberg, @​andrewimm, @​sokra, and @​mischnic for helping!

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)
  • Deduplicate output assets and detect content conflicts on emit (#92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • backport: Move expanded adapters docs to API reference (#92115) (#92129)
  • Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
  • [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
  • next.config.js: Accept an option for serverFastRefresh (#91968)
  • Turbopack: enable server HMR for app route handlers (#91466)
  • Turbopack: exclude metadata routes from server HMR (#92034)
  • Fix CI for glibc linux builds
  • Backport: disable bmi2 in qfilter #92177
  • [backport] Fix CSS HMR on Safari (#92174)

... (truncated)

Commits

@dependabot dependabot Bot added auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file github_actions:pull-request Trigger Pull Request Checks javascript Pull requests that update javascript code labels Apr 22, 2026
@dependabot dependabot Bot requested review from a team as code owners April 22, 2026 14:38
@dependabot dependabot Bot added github_actions:pull-request Trigger Pull Request Checks dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code auto-merge Ready to automatically merge after being open for 48 hours labels Apr 22, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 22, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nodejs-org Ready Ready Preview Apr 26, 2026 10:18am

Request Review

@github-actions
Copy link
Copy Markdown
Contributor

👋 Codeowner Review Request

The following codeowners have been identified for the changed files:

Team reviewers: @nodejs/nodejs-website @nodejs/web-infra

Please review the changes when you have a chance. Thank you! 🙏

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 22, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.18%. Comparing base (60aeb4b) to head (0626d0d).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8834      +/-   ##
==========================================
- Coverage   73.23%   73.18%   -0.05%     
==========================================
  Files         102      102              
  Lines        8623     8623              
  Branches      313      314       +1     
==========================================
- Hits         6315     6311       -4     
- Misses       2307     2311       +4     
  Partials        1        1              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-206c32a9c1 branch from 7fe2357 to dd4ccbf Compare April 22, 2026 16:06
Bumps the vercel group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.8.17` | `2.9.6` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.213.0` | `0.215.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.213.0` | `0.215.0` |
| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.213.0` | `0.215.0` |
| [@vercel/otel](https://github.com/vercel/otel) | `2.1.1` | `2.1.2` |
| [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.2.1` | `16.2.4` |



Updates `turbo` from 2.8.17 to 2.9.6
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.8.17...v2.9.6)

Updates `@opentelemetry/api-logs` from 0.213.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.213.0...experimental/v0.215.0)

Updates `@opentelemetry/instrumentation` from 0.213.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.213.0...experimental/v0.215.0)

Updates `@opentelemetry/sdk-logs` from 0.213.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.213.0...experimental/v0.215.0)

Updates `@vercel/otel` from 2.1.1 to 2.1.2
- [Release notes](https://github.com/vercel/otel/releases)
- [Commits](https://github.com/vercel/otel/compare/@vercel/otel@2.1.1...@vercel/otel@2.1.2)

Updates `@next/eslint-plugin-next` from 16.2.1 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.4/packages/eslint-plugin-next)

---
updated-dependencies:
- dependency-name: "@next/eslint-plugin-next"
  dependency-version: 16.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vercel
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vercel
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vercel
- dependency-name: "@opentelemetry/sdk-logs"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vercel
- dependency-name: "@vercel/otel"
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vercel
- dependency-name: turbo
  dependency-version: 2.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vercel
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-206c32a9c1 branch from dd4ccbf to 0626d0d Compare April 26, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants