@sebspark/opentelemetry-instrumentation-opensearch 0.3.12 → 0.3.14

package/CHANGELOG.md

@@ -0,0 +1,173 @@
+# @sebspark/opentelemetry-instrumentation-opensearch
+
+## 0.3.14
+
+### Patch Changes
+
+- 66ac832: * Upgraded to TypeScript 7
+  - Replaced tsup with tsdown for package builds
+  - Fixed cli-tester stdout parsing, resolving flaky e2e tests across the repo
+  - Patched vulnerable transitive dependencies (uuid, socket.io-parser, and others)
+
+## 0.3.13
+
+### Patch Changes
+
+- eefb531: Updated dependencies
+
+## 0.3.12
+
+### Patch Changes
+
+- 5e9fc45: Bump dependencies. Security fixes:
+
+  - **form-data** 2.5.6 / 4.0.6 — CRLF injection via unescaped multipart field names and filenames (High)
+  - **vite** 8.1.2 — `server.fs.deny` bypass on Windows alternate paths; NTLMv2 hash disclosure via launch-editor (High/Moderate)
+  - **ws** 8.21.0 — Memory exhaustion DoS from tiny fragments; uninitialized memory disclosure (High/Moderate)
+  - **undici** 8.5.0 — Multiple DoS and information disclosure CVEs (High/Moderate/Low)
+  - **tar** 7.5.19 — PAX size override causes tar parser differential / file smuggling (Moderate)
+  - **qs** 6.15.3 — DoS via `qs.stringify` crash on null/undefined entries (Moderate)
+  - **@opentelemetry/core** 2.8.0 — Unbounded memory allocation in W3C Baggage propagation (Moderate)
+  - **@babel/core** 7.29.7 — Arbitrary file read via sourceMappingURL comment (Low)
+  - **protobufjs** 8.6.5
+
+  Other dependency updates:
+
+  - `@google-cloud/spanner` 8.8.0
+  - `@testcontainers/*` 12.0.4
+  - `google-auth-library` 10.9.0
+  - `mockserver-client` 7.3.0
+  - `nock` 14.0.16
+  - `prettier` 3.9.4
+  - `redis` 6.1.0
+  - `webpack` 5.108.3 / `webpack-cli` 7.1.0
+
+## 0.3.11
+
+### Patch Changes
+
+- e0eda57: Updated dependencies
+
+## 0.3.10
+
+### Patch Changes
+
+- 26d55f0: Fix `@sebspark/memredis` so Redis clients are assignable to `IPersistor` by widening the pub/sub subscription return types to accept both MemRedis and node-redis implementations.
+
+  Also update supporting dependencies across the affected packages.
+
+## 0.3.9
+
+### Patch Changes
+
+- a6c27f3: Updated dependencies
+
+## 0.3.8
+
+### Patch Changes
+
+- 264e665: Upgrade `redis` to v6 in `@sebspark/promise-cache` and bump minor dependencies across the workspace.
+
+  **Breaking change (`@sebspark/promise-cache`):**
+  `redis` upgraded from `5.12.1` → `6.0.0`. Redis v6 contains breaking changes in its API — see the [redis v6 migration guide](https://github.com/redis/node-redis/blob/master/docs/v4-to-v6.md) if your code uses the client directly.
+
+  **Dependency updates across packages:**
+  - `testcontainers` / `@testcontainers/*`: `12.0.0` → `12.0.1` (health-check, opensearch, opentelemetry-instrumentation-opensearch, otel, promise-cache, socket.io-gcp-pubsub-emitter, spanner-migrate, test-iap)
+  - `redis`: `5.12.1` → `6.0.0` (otel, promise-cache)
+  - `tsdown`: `0.22.0` → `0.22.1` (tsconfig)
+  - `turbo` / `@turbo/gen`: `2.9.15` → `2.9.16`
+  - `webpack-cli`: `7.0.2` → `7.0.3` (avsc-isometric)
+
+  **Test fix (`@sebspark/promise-cache`):**
+  Pinned Redis container image tag to `redis:8.8-alpine` (was `redis:8-alpine`) to prevent floating-tag drift in e2e tests.
+
+## 0.3.7
+
+### Patch Changes
+
+- 242eb33: This release primarily updates dependencies across the listed packages, including:
+  - Testcontainers v12 upgrades in packages that run integration/e2e tests.
+  - Vitest/Biome/Turbo and related tooling updates.
+  - Runtime dependency updates such as `date-fns`, `@inquirer/*`, `socket.io-adapter`, and `ws`.
+
+  It also includes two targeted fixes:
+  - `@sebspark/opensearch`: fixed TypeScript compatibility so strict `SearchRequest<T>` / `SearchRequestBody<T>` can be assigned to OpenSearch API request types, and added a compile-time compatibility test.
+  - `@sebspark/health-check`: updated the e2e readiness payload assertions and type-only import usage to match current runtime output and TypeScript expectations.
+
+## 0.3.6
+
+### Patch Changes
+
+- c5e9c99: Resolve protobufjs CVE by pinning to `8.3.0` across all affected packages via root resolutions. Upgraded OpenTelemetry packages to `0.218.0` (which also eliminates the previous hardpin on `protobufjs@8.0.1`), `axios` to `1.16.1`, `ws` to `8.20.1`, `qs` to `6.15.2`, and `@opentelemetry/semantic-conventions` to `1.41.1`.
+
+## 0.3.5
+
+### Patch Changes
+
+- cf4ca8e: Export `Filter`, `MethodCall`, `MethodCallBuilder`, and `ResponseCb` from `@sebspark/emulator` so that packages wrapping `createEmulator<T>()` can name the return types in their generated declaration files (fixes TS4023).
+
+  Dependency updates:
+  - `@opentelemetry/*` instrumentation packages: `0.216.0` → `0.217.0`; `instrumentation-undici`: `0.26.0` → `0.27.0`; resource detectors, individual instrumentations bumped to latest patch/minor releases
+  - `@google-cloud/spanner`: `8.7.0` → `8.7.1`
+  - `fast-xml-parser`: `5.7.2` → `5.7.3`
+  - Dev: `turbo` `2.9.8` → `2.9.9`, `knip` `6.11.0` → `6.12.0`, `syncpack` `14.3.1` → `15.0.0`
+
+## 0.3.4
+
+### Patch Changes
+
+- 7d8cc98: Dependabot dependency updates
+
+## 0.3.3
+
+### Patch Changes
+
+- 8a120f6: Updated dependencies for all and docs for emulator
+
+## 0.3.2
+
+### Patch Changes
+
+- e9a7a28: Updated dependencies
+
+## 0.3.1
+
+### Patch Changes
+
+- 4e12590: Updated dependencies
+
+## 0.3.0
+
+### Minor Changes
+
+- f202dc3: Improved Opensearch tracing
+
+## 0.2.2
+
+### Patch Changes
+
+- 91aed80: Updated dependencies
+
+## 0.2.1
+
+### Patch Changes
+
+- cd9e760: Duration added to openapie-express routes
+
+## 0.2.0
+
+### Minor Changes
+
+- b92b79a: Added a bunch of metrics
+
+## 0.1.1
+
+### Patch Changes
+
+- 67d6129: Updated dependencies
+
+## 0.1.0
+
+### Minor Changes
+
+- 77a7a66: First release

package/dist/index.d.mts

@@ -1,7 +1,6 @@
 import { ApiResponse, TransportRequestParams } from "@opensearch-project/opensearch/lib/Transport.js";
 import { InstrumentationBase, InstrumentationConfig } from "@opentelemetry/instrumentation";
 import { Span } from "@opentelemetry/api";
-
 //#region src/types.d.ts
 interface OpenSearchInstrumentationConfig extends InstrumentationConfig {
   dbStatementSerializer?: false | ((params: TransportRequestParams) => string);
@@ -12,7 +11,7 @@ interface OpenSearchInstrumentationConfig extends InstrumentationConfig {
 }
 //#endregion
 //#region src/index.d.ts
-declare class OpenSearchInstrumentation extends InstrumentationBase {
+export declare class OpenSearchInstrumentation extends InstrumentationBase {
   private readonly osConfig;
   private _original;
   constructor(config?: OpenSearchInstrumentationConfig);
@@ -21,5 +20,5 @@ declare class OpenSearchInstrumentation extends InstrumentationBase {
   disable(): void;
 }
 //#endregion
-export { OpenSearchInstrumentation, type OpenSearchInstrumentationConfig };
+export type { OpenSearchInstrumentationConfig };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/index.ts"],"mappings":";;;;;UAOiB,+BAAA,SAAwC,qBAAA;EACvD,qBAAA,aAAkC,MAAA,EAAQ,sBAAA;EAC1C,WAAA,IAAe,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,sBAAA;EACnC,YAAA,IAAgB,IAAA,EAAM,IAAA,EAAM,QAAA,EAAU,WAAA;EACtC,+BAAA;EACA,0BAAA;AAAA;;;cCGW,yBAAA,SAAkC,mBAAmB;EAAA,iBAC/C,QAAA;EAAA,QACT,SAAA;cAEI,MAAA,GAAQ,+BAAA;EAAA,UAQV,IAAA;EAED,MAAA;EAWA,OAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/index.ts"],"mappings":";;;;UAOiB,wCAAwC;EACvD,kCAAkC,QAAQ;EAC1C,eAAe,MAAM,MAAM,QAAQ;EACnC,gBAAgB,MAAM,MAAM,UAAU;EACtC;EACA;;;;qBCGW,kCAAkC;mBAC5B;UACT;EAER,YAAY,SAAQ;YAQV;EAED;EAWA"}

package/dist/index.mjs

@@ -6,7 +6,7 @@ import { suppressTracing } from "@opentelemetry/core";
 import { ATTR_DB_COLLECTION_NAME, ATTR_DB_OPERATION_NAME, ATTR_DB_QUERY_TEXT, ATTR_DB_SYSTEM_NAME, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_SERVER_ADDRESS, ATTR_SERVER_PORT } from "@opentelemetry/semantic-conventions";
 //#region package.json
 var name = "@sebspark/opentelemetry-instrumentation-opensearch";
-var version = "0.3.12";
+var version = "0.3.14";
 //#endregion
 //#region src/parse-path.ts
 const METHOD_OPERATIONS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebspark/opentelemetry-instrumentation-opensearch",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.mjs",
@@ -20,31 +20,36 @@
     "lint": "biome check .",
     "test": "vitest run --passWithNoTests --coverage",
     "test:e2e": "vitest --config vitest.config.e2e.ts --run",
-    "typecheck": "vitest --typecheck.only --passWithNoTests"
+    "typecheck": "vitest --typecheck.only --passWithNoTests --run"
   },
   "peerDependencies": {
     "@opensearch-project/opensearch": ">=2",
     "@opentelemetry/api": ">=1.9.0"
   },
   "dependencies": {
-    "@opentelemetry/core": "2.8.0",
-    "@opentelemetry/instrumentation": "0.219.0",
-    "@opentelemetry/semantic-conventions": "1.41.1"
+    "@opentelemetry/core": "2.11.0",
+    "@opentelemetry/instrumentation": "0.222.0",
+    "@opentelemetry/semantic-conventions": "1.43.0"
   },
   "devDependencies": {
+    "@biomejs/biome": "2.5.12",
     "@opensearch-project/opensearch": "3.6.0",
     "@opentelemetry/api": "1.9.1",
-    "@opentelemetry/instrumentation-http": "0.219.0",
-    "@opentelemetry/instrumentation-undici": "0.29.0",
-    "@opentelemetry/sdk-trace-base": "2.8.0",
-    "@opentelemetry/sdk-trace-node": "2.8.0",
-    "@testcontainers/opensearch": "12.0.4"
+    "@opentelemetry/instrumentation-http": "0.222.0",
+    "@opentelemetry/instrumentation-undici": "0.32.0",
+    "@opentelemetry/sdk-trace-base": "2.11.0",
+    "@opentelemetry/sdk-trace-node": "2.11.0",
+    "@sebspark/tsconfig": "*",
+    "@testcontainers/opensearch": "12.1.0",
+    "typescript": "7.0.2",
+    "vite": "8.2.2",
+    "vitest": "5.0.0"
   },
   "resolutions": {
-    "protobufjs": "8.6.5"
+    "protobufjs": "8.8.0"
   },
   "repository": {
     "type": "git",
     "url": "https://github.com/seb-oss/Spark-packages.git"
   }
-}
+}