chore(deps): bump the test-versions group across 1 directory with 23 updates by dependabot[bot] · Pull Request #10871 · DataDog/dd-trace-js

dependabot · 2026-10-22T00:56:06Z

Bumps the test-versions group with 23 updates in the /packages/dd-trace/test/plugins/versions directory:

Package	From	To
@anthropic-ai/claude-agent-sdk	`0.3.289`	`0.3.303`
@aws/durable-execution-sdk-js	`2.6.0`	`2.7.0`
@aws/durable-execution-sdk-js-testing	`1.3.0`	`1.3.1`
@opentelemetry/api-logs	`0.222.0`	`0.223.0`
@opentelemetry/exporter-jaeger	`2.11.0`	`2.12.0`
@opentelemetry/instrumentation	`0.222.0`	`0.223.0`
@opentelemetry/instrumentation-express	`0.70.0`	`0.71.1`
@opentelemetry/instrumentation-http	`0.222.0`	`0.223.0`
@opentelemetry/sdk-node	`0.222.0`	`0.223.0`
@supabase/auth-js	`2.117.2`	`2.118.0`
@supabase/functions-js	`2.117.2`	`2.118.0`
@supabase/postgrest-js	`2.117.2`	`2.118.0`
@supabase/realtime-js	`2.117.2`	`2.118.0`
@supabase/storage-js	`2.117.2`	`2.118.0`
@supabase/supabase-js	`2.117.2`	`2.118.0`
@types/node	`26.6.4`	`26.6.5`
google-gax	`6.10.0`	`6.12.1`
graphql-jit	`0.8.9`	`0.9.3`
mercurius	`16.10.1`	`16.12.0`
npm	`12.2.0`	`12.2.1`
pnpm	`12.9.1`	`12.14.0`
protobufjs	`8.8.0`	`8.8.1`
zod	`4.6.5`	`4.6.7`

Updates @anthropic-ai/claude-agent-sdk from 0.3.289 to 0.3.303

Release notes

Sourced from @anthropic-ai/claude-agent-sdk's releases.

v0.3.303

What's changed

Updated to parity with Claude Code v2.1.303

Update
npm install @anthropic-ai/claude-agent-sdk@0.3.303
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.303
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.303
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.303
v0.3.302

What's changed

Fixed structured output results delivering a response's output as structured_output when the API refused that response; the result is now an error with no payload

Changed an omitted permissionMode to start in default mode on third-party providers, with telemetry off or on a fresh install; pass permissionMode: 'auto' to keep auto mode

Changed fork subagents (subagent_type: "fork") to be on by default in SDK sessions, as in the terminal; run_in_background is still offered, and CLAUDE_CODE_FORK_SUBAGENT=0 turns them off

Updated to parity with Claude Code v2.1.302

Update
npm install @anthropic-ai/claude-agent-sdk@0.3.302
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.302
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.302
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.302
v0.3.301

What's changed

Added per-tool permission policies to sdk-type MCP server configs: tools entries with permission_policy always_ask or always_deny, applied on initialize and setMcpServers()

Added BUILTIN_TOOL_NAMES and LEGACY_TOOL_NAME_ALIASES exports: the public built-in tool names and their earlier names, for checking permission rules and tool settings

Added addPlugins to Query.reloadPlugins() so a host can load more plugin folders into a running session

Fixed setModel() with a model ID failing while the account is at its five-hour or weekly usage limit; the model now applies and the next message reports the limit

Changed the error when a full disk keeps the login from being refreshed: error is now invalid_request, not authentication_failed, and api_error_status is null, not 401

Changed mcpServerStatus() to still report a tool's _meta.ui.visibility when the rest of its _meta.ui fails validation

Updated to parity with Claude Code v2.1.301

Update

... (truncated)

Changelog

Sourced from @anthropic-ai/claude-agent-sdk's changelog.

0.3.303

Updated to parity with Claude Code v2.1.303

0.3.302

Fixed structured output results delivering a response's output as structured_output when the API refused that response; the result is now an error with no payload

Changed an omitted permissionMode to start in default mode on third-party providers, with telemetry off or on a fresh install; pass permissionMode: 'auto' to keep auto mode

Changed fork subagents (subagent_type: "fork") to be on by default in SDK sessions, as in the terminal; run_in_background is still offered, and CLAUDE_CODE_FORK_SUBAGENT=0 turns them off

Updated to parity with Claude Code v2.1.302

0.3.301

Added per-tool permission policies to sdk-type MCP server configs: tools entries with permission_policy always_ask or always_deny, applied on initialize and setMcpServers()

Added BUILTIN_TOOL_NAMES and LEGACY_TOOL_NAME_ALIASES exports: the public built-in tool names and their earlier names, for checking permission rules and tool settings

Added addPlugins to Query.reloadPlugins() so a host can load more plugin folders into a running session

Fixed setModel() with a model ID failing while the account is at its five-hour or weekly usage limit; the model now applies and the next message reports the limit

Changed the error when a full disk keeps the login from being refreshed: error is now invalid_request, not authentication_failed, and api_error_status is null, not 401

Changed mcpServerStatus() to still report a tool's _meta.ui.visibility when the rest of its _meta.ui fails validation

Updated to parity with Claude Code v2.1.301

0.3.300

Fixed importSessionToStore skipping transcript rows that contain a Unicode line or paragraph separator (U+2028, U+2029) on Node 24 and Bun

Fixed a background subagent's final report in auto mode being joined into one turn with another message from the same subagent; the report now always runs as its own turn

Fixed rewind_conversation with interrupt_if_running stopping the running turn before refusing with "unseen later turn"

Reverted canUseTool options carrying suppressAlwaysAllowRule: true for connector tools that an organization set to require approval (added in 0.3.292)

Improved the browser SDK bundle (@anthropic-ai/claude-agent-sdk/browser): 40% smaller to download, by no longer bundling a Node crypto polyfill

Changed thinking: { type: 'disabled' } and maxThinkingTokens: 0 to run as adaptive thinking on models that can't turn thinking off

Changed updatedInput from PreToolUse and PermissionRequest hook callbacks: it is now validated like Claude's own input and unknown keys are dropped; canUseTool is unchanged

Updated to parity with Claude Code v2.1.300

0.3.299

Added an optional nextFireAt (epoch ms of the next run) to the CronCreate and CronList tool outputs

Added property_order to the elicitation control request: a form's field names in the order the MCP server listed them, for hosts whose transport keeps no JSON object key order

Fixed rewind_conversation answering "target not found" for a message stopped during its prompt hooks or plugins: until a reply or input follows, it answers rewound: true with a null prefillText

Fixed in-process SDK MCP servers named constructor or toString being silently dropped when a prewarm() process is claimed with SpareProcess.claim()

Fixed queued user messages with content-block arrays running together without a line break when merged into one turn

Fixed origin.body on a user message that merges several queued peer messages (from other sessions or agents) carrying only the first message's text; it is now omitted

Changed initialize, mcp_set_servers and claim_session to refuse the reserved MCP server names __proto__, __defineGetter__, __defineSetter__, __lookupGetter__, __lookupSetter__

Updated to parity with Claude Code v2.1.299

0.3.298

Updated to parity with Claude Code v2.1.298

0.3.297

Updated to parity with Claude Code v2.1.297

... (truncated)

Commits

53464f2 chore: Update CHANGELOG.md
9cf9f23 chore: Update CHANGELOG.md
b0fc766 chore: Update CHANGELOG.md
fbc5294 chore: Update CHANGELOG.md
273b4c8 chore: Update CHANGELOG.md
85d8f8e chore: Update CHANGELOG.md
da321bb chore: Update CHANGELOG.md
799dc78 chore: Update CHANGELOG.md
5dc91fb chore: Update CHANGELOG.md
d4f0435 chore: Update CHANGELOG.md
Additional commits viewable in compare view

Updates @aws/durable-execution-sdk-js from 2.6.0 to 2.7.0

Release notes

Sourced from @aws/durable-execution-sdk-js's releases.

sdk-2.7.0 / otel-1.2.0 / test-1.3.1

Package Published version Prepared version

@aws/durable-execution-sdk-js 2.6.0 2.7.0

@aws/durable-execution-sdk-js-otel 1.1.0 1.2.0

@aws/durable-execution-sdk-js-testing 1.3.0 1.3.1

These versions are already on main through #956. Use the exact sdk-2.7.0 tag for Lambda managed-runtime rollout. Package changes have separate timelines below.

@aws/durable-execution-sdk-js

Why Upgrade

Get consistent waitForCondition state and results across initial execution and replay, including with custom serializers and wait strategies that mutate their input.

Keep successful undefined results from map and parallel, so batch result lists remain consistent with success counts.

Improve instrumentation accuracy with fresh completion IDs in local/custom-client invocations and clear diagnostics for conflicting OTel registrations.

Enable optional trace metadata for each new durable invoke checkpoint, without changing the application payload, using the updated Lambda client support.

What's Changed

fix(sdk): preserve UpdatedOperationIds in local/custom-client invocation inputs so instrumentation can distinguish fresh external completions from replay, by @zhongkechen in #954.

fix(sdk): reject competing execution and invocation OTel views across supported registration paths, with diagnostics identifying the conflict, by @zhongkechen in #956.

fix(sdk): round-trip waitForCondition initial state through the configured serializer before the first check, and deserialize the checkpointed success payload before returning it. Initial execution and replay now agree even when a wait strategy mutates its input, by @musatoktas in #974.

fix(sdk): preserve successful map/parallel branches returning undefined in BatchResult.succeeded() and getResults(), including mock results and replay, by @shin4141 in #982.

feat(sdk): collect optional plugin trace metadata for new context.invoke() START checkpoints and serialize the X-Ray header in ChainedInvokeOptions.XAmznTraceId. Existing checkpointed STARTs retain their replay behavior. The Lambda client dependency is now ^3.1152.0, by @zhongkechen in #957.

chore(deps): refresh SDK dependencies and build tooling, by @ParidelPooya in #985 and #992.

Serializer behavior: #974 adds a serialize/deserialize round-trip for initialState and an additional deserialization on success. Invalid initial state is rejected before the first condition check.

Full Changelog (reviewed main): sdk-2.6.0/test-1.3.0...911b7f0e

@aws/durable-execution-sdk-js-otel

Why Upgrade

Follow workflows across suspension and resume with polling continuation links, invocation timestamps aligned with application instrumentation, and earlier execution-root export for eligible fallback traces.

See fresh wait, invoke, and callback completions while reducing duplicate terminal spans on successful replays.

Supply calling-operation identity and sampling decisions, including Sampled=0, in optional chained-invoke metadata when used with core 2.7.0 and a compatible tracer.

What's Changed

fix(otel): export an SDK-owned synthetic execution root for fallback traces, by @blackmore-technology-group in #935.

fix(otel): declare mutually exclusive execution/invocation views while preserving provider API version 1, by @zhongkechen in #956.

fix(otel): align invocation-view span timestamps with the user instrumentation clock, by @zhongkechen in #962.

fix(otel): link resumed polling operation segments to their initial operation and Workflow; keep each polling attempt under its operation parent with a Workflow link, by @zhongkechen in #964.

fix(otel): export the stable synthetic root at the start of each eligible sampled fallback invocation, including invocations that later suspend. Emit at most one copy per invocation; identical copies on retries and resumes can recover an earlier lost export, by @zhongkechen in #966.

fix(otel): retain fresh completion notifications from invocation inputs and checkpoint responses, export wait/invoke/callback completions, and suppress duplicate terminal spans on later successful replays. Drain remaining notifications at invocation end, by @zhongkechen in #953.

feat(otel): supply chained-invoke Root/Parent/Sampled metadata from the resolved execution trace and calling operation, including Sampled=0, without creating additional spans. Omit this metadata when the durable sampler bridge cannot be verified, by @zhongkechen in #957.

chore(deps): update build and test dependencies, including property-based test tooling, while retaining the existing runtime peer ranges, by @ParidelPooya in #985 and #992.

... (truncated)

Commits

See full diff in compare view

Updates @aws/durable-execution-sdk-js-testing from 1.3.0 to 1.3.1

Commits

See full diff in compare view

Updates @opentelemetry/api-logs from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/exporter-jaeger from 2.11.0 to 2.12.0

Release notes

Sourced from @opentelemetry/exporter-jaeger's releases.

v2.12.0

2.12.0

🚀 Features

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

feat(ci): support releasing from maintenance branches #6767 @pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @opentelemetry/exporter-jaeger's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide. For notes on migrating to 3.x see the 3.x migration guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

3.0.0

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.56.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.12.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

... (truncated)

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/instrumentation from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/instrumentation-express from 0.70.0 to 0.71.1

Changelog

Sourced from @opentelemetry/instrumentation-express's changelog.

0.71.1 (2026-10-15)

Bug Fixes

instrumentation-express: don't leave an ignored request handler's path in http.route (#3802) (a5ee809)

0.71.0 (2026-10-06)

Features

deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Dependencies

The following workspace dependencies were updated

devDependencies

@opentelemetry/contrib-test-utils bumped from ^0.69.0 to ^0.70.0

Commits

3c48599 chore: release main (#3805)
a5ee809 fix(instrumentation-express): don't leave an ignored request handler's path i...
See full diff in compare view

Updates @opentelemetry/instrumentation-http from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/instrumentation-http's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/sdk-node from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @supabase/auth-js from 2.117.2 to 2.118.0

Release notes

Sourced from @supabase/auth-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

storage: add content-encoding support for uploads (#1949)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Atharv Gaur @Athaxv

Ferhat Elmas

Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

deps: bump next to patch RCE in realtime-js example (#2733)

functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @supabase/auth-js's changelog.

2.118.0 (2026-10-15)

This was a version bump only for @supabase/auth-js to align it with other projects, there were no code changes.

2.117.3 (2026-10-07)

This was a version bump only for @supabase/auth-js to align it with other projects, there were no code changes.

Commits

aac9d32 chore(release): version 2.117.3 changelogs (#2744)
a684cf9 chore(release): version 2.117.2 changelogs (#2707)
See full diff in compare view

Updates @supabase/functions-js from 2.117.2 to 2.118.0

Release notes

Sourced from @supabase/functions-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

storage: add content-encoding support for uploads (#1949)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Atharv Gaur @Athaxv

Ferhat Elmas

Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

deps: bump next to patch RCE in realtime-js example (#2733)

functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @supabase/functions-js's changelog.

2.118.0 (2026-10-15)

This was a version bump only for @supabase/functions-js to align it with other projects, there were no code changes.

2.117.3 (2026-10-07)

🩹 Fixes

functions: send a Blob or File with its own content type (#2714)

❤️ Thank You

Bruno Gale @fresh55

Commits

aac9d32 chore(release): version 2.117.3 changelogs (#2744)
dc36793 test(functions): background deno run in relay and clean up networks (#2739)
51d75f8 fix(functions): send a Blob or File with its own content type (#2714)
a684cf9 chore(release): version 2.117.2 changelogs (#2707)
See full diff in compare view

Updates @supabase/postgrest-js from 2.117.2 to 2.118.0

Release notes

Sourced from @supabase/postgrest-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

storage: add content-encoding support for uploads (#1949)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Atharv Gaur @Athaxv

Ferhat Elmas

Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

deps: bump next to patch RCE in realtime-js example (#2733)

functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @supabase/postgrest-js's changelog.

2.118.0 (2026-10-15)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

❤️ Thank You

Lukas Klingsbo

2.117.3 (2026-10-07)

🩹 Fixes

postgrest: treat TimeoutError as an abort in retry guard (#2732)

❤️ Thank You

Katerina Skroumpelou @mandarini

Commits

fd07c4d test(postgrest): add type inference cases for the generated types (#2750)
146fd47 chore(supabase): bump supabase cli to 2.120.0 (#2729)
b9753a1 feat(postgrest): leave computed fields out of select('*') and resolve no-argu...
aac9d32 chore(release): version 2.117.3 changelogs (#2744)
cb76828 fix(postgrest): treat TimeoutError as an abort in retry guard (#2732)
a684cf9 chore(release): version 2.117.2 changelogs (#2707)
See full diff in compare view

Updates @supabase/realtime-js from 2.117.2 to 2.118.0

Release notes

Sourced from @supabase/realtime-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

storage: add content-encoding support for uploads (#1949)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Atharv Gaur @Athaxv

Ferhat Elmas

Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

deps: bump next to patch RCE in realtime-js example (#2733)

functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @supabase/realtime-js's changelog.

2.118.0 (2026-10-15)

This was a version bump only for @supabase/realtime-js to align it with other projects, there were no code changes.

2.117.3 (2026-10-07)

This was a version bump only for @supabase/realtime-js to align it with other projects, there were no code changes.

Commits

chatgpt-codex-connector · 2026-10-22T00:56:17Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-22T09:46:28.798049Z	`bf56be8`	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

dd-octo-sts · 2026-10-22T00:56:59Z

Overall package size

Self size: 9.68 MB
Deduped: 10.43 MB
No deduping: 10.43 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.5.1 | 127.66 kB | 528.28 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

datadog-datadog-prod-us1-2 · 2026-10-22T00:59:34Z

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 3 Pipeline jobs failed

APM Integrations | graphql — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

LLMObs | claude-agent-sdk — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

All Green | all-green

View more details · View in GitHub Actions

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🔄 Datadog retried 3 tests - 3 passed on retry

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: bf56be8 | Docs | View more details | Give us feedback!}

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 71946118dd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-10-22T01:01:03Z

+    "google-gax": "6.12.1",
    "graphql": "16.14.2",
-    "graphql-jit": "0.8.9",
+    "graphql-jit": "0.9.3",


Keep graphql-jit below the unsupported 0.9 line

In the graphql job of .github/workflows/apm-integrations.yml, the repository-pinned suite installs this exact version because useSandbox(["'graphql-jit'"]) resolves an empty range through getCappedRange. However, packages/datadog-instrumentations/src/helpers/rewriter/instrumentations/graphql-jit.js registers hooks only for versions <0.9.0; therefore 0.9.3 receives no rewrite hooks, and the test at packages/datadog-plugin-graphql/test/jit.spec.js:2969-2971 waits for a resolver span that can never be emitted. Either retain the 0.8.x pin or add and test 0.9.x instrumentation with this bump.

Useful? React with 👍 / 👎.

datadog-datadog-prod-us1-2

The graphql-jit 0.9.3 update exceeds every registered instrumentation range, leaving the existing repository-pinned GraphQL tracing test without its required spans.

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit 7194611}

datadog-datadog-prod-us1-2 · 2026-10-22T01:07:12Z

+    "google-gax": "6.12.1",
    "graphql": "16.14.2",
-    "graphql-jit": "0.8.9",
+    "graphql-jit": "0.9.3",


Keep graphql-jit within the instrumented version range

The GraphQL suite’s repository-pinned sandbox installs graphql-jit 0.9.3, but every graphql-jit instrumentation registration excludes versions >=0.9.0. The existing tracing test therefore receives no required execute or resolver spans and fails. Retain 0.8.9 until instrumentation supports 0.9.x.

Suggested change

"graphql-jit": "0.9.3",

"graphql-jit": "0.8.9",

React: 👍 useful · 👎 wrong · 😕 unclear · 👀 right, but not acting on it

What each reaction means

👍 Useful: correct, and you're fixing it or will.

👎 Wrong: the finding is incorrect, for example the bug can't happen or the code was misread.

😕 Unclear: you can't tell what it means or why it matters.

👀 Right, not acting: correct, but intended, out of scope for this PR, a known risk, or too minor.

_{🤖 Bits Code Review} _{· Open Bits AI session}

pr-commenter · 2026-10-22T01:10:52Z

Benchmarks

Benchmark execution time: 2026-10-22 09:58:59

Comparing candidate commit bf56be8 in PR branch dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/test-versions-86f1b86e39 with baseline commit 3dacce1 in branch master.

📊 Benchmarking dashboard

Found 0 performance improvements and 0 performance regressions! Performance is the same for 2450 metrics, 7 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

🟩 = significantly better candidate vs. baseline
🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-20

unstable max_rss_usage [-52918.447KB; +53285.947KB] or [-19.528%; +19.664%]

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

unstable max_rss_usage [-30.167MB; +12.531MB] or [-8.776%; +3.645%]

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-26

unstable max_rss_usage [-42.368MB; +26.374MB] or [-13.887%; +8.645%]

scenario:openfeature-scale-full-24

unstable max_rss_usage [-7.359MB; +24.819MB] or [-2.383%; +8.036%]

scenario:openfeature-scale-full-26

unstable max_rss_usage [-38.136MB; +25.135MB] or [-14.941%; +9.847%]

scenario:test-optimization-wide-tags-24

unstable cpu_user_time [-210.616ms; +232.558ms] or [-5.593%; +6.175%]
unstable execution_time [-207.923ms; +231.472ms] or [-5.474%; +6.094%]

…updates Bumps the test-versions group with 23 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.289` | `0.3.303` | | [@aws/durable-execution-sdk-js](https://github.com/aws/aws-durable-execution-sdk-js/tree/HEAD/packages/aws-durable-execution-sdk-js) | `2.6.0` | `2.7.0` | | [@aws/durable-execution-sdk-js-testing](https://github.com/aws/aws-durable-execution-sdk-js/tree/HEAD/packages/aws-durable-execution-sdk-js-testing) | `1.3.0` | `1.3.1` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/exporter-jaeger](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.70.0` | `0.71.1` | | [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@supabase/auth-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/auth-js) | `2.117.2` | `2.118.0` | | [@supabase/functions-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/functions-js) | `2.117.2` | `2.118.0` | | [@supabase/postgrest-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/postgrest-js) | `2.117.2` | `2.118.0` | | [@supabase/realtime-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/realtime-js) | `2.117.2` | `2.118.0` | | [@supabase/storage-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/storage-js) | `2.117.2` | `2.118.0` | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.117.2` | `2.118.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` | | [google-gax](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gax) | `6.10.0` | `6.12.1` | | [graphql-jit](https://github.com/zalando-incubator/graphql-jit) | `0.8.9` | `0.9.3` | | [mercurius](https://github.com/mercurius-js/mercurius) | `16.10.1` | `16.12.0` | | [npm](https://github.com/npm/cli) | `12.2.0` | `12.2.1` | | [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm/npm/pnpm) | `12.9.1` | `12.14.0` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.8.0` | `8.8.1` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | Updates `@anthropic-ai/claude-agent-sdk` from 0.3.289 to 0.3.303 - [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-typescript@v0.3.289...v0.3.303) Updates `@aws/durable-execution-sdk-js` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/aws/aws-durable-execution-sdk-js/releases) - [Changelog](https://github.com/aws/aws-durable-execution-sdk-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-durable-execution-sdk-js/commits/sdk-2.7.0/packages/aws-durable-execution-sdk-js) Updates `@aws/durable-execution-sdk-js-testing` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/aws/aws-durable-execution-sdk-js/releases) - [Changelog](https://github.com/aws/aws-durable-execution-sdk-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-durable-execution-sdk-js/commits/HEAD/packages/aws-durable-execution-sdk-js-testing) Updates `@opentelemetry/api-logs` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/exporter-jaeger` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0) Updates `@opentelemetry/instrumentation` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/instrumentation-express` from 0.70.0 to 0.71.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-express-v0.71.1/packages/instrumentation-express) Updates `@opentelemetry/instrumentation-http` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/sdk-node` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@supabase/auth-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/auth-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/auth-js) Updates `@supabase/functions-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/functions-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/functions-js) Updates `@supabase/postgrest-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/postgrest-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/postgrest-js) Updates `@supabase/realtime-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/realtime-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/realtime-js) Updates `@supabase/storage-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/storage-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/storage-js) Updates `@supabase/supabase-js` from 2.117.2 to 2.118.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/supabase-js) Updates `@types/node` from 26.6.4 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `google-gax` from 6.10.0 to 6.12.1 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/gax/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-gax-v6.12.1/core/packages/gax) Updates `graphql-jit` from 0.8.9 to 0.9.3 - [Release notes](https://github.com/zalando-incubator/graphql-jit/releases) - [Commits](zalando-incubator/graphql-jit@v0.8.9...v0.9.3) Updates `mercurius` from 16.10.1 to 16.12.0 - [Release notes](https://github.com/mercurius-js/mercurius/releases) - [Commits](mercurius-js/mercurius@v16.10.1...v16.12.0) Updates `npm` from 12.2.0 to 12.2.1 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md) - [Commits](npm/cli@v12.2.0...v12.2.1) Updates `pnpm` from 12.9.1 to 12.14.0 - [Release notes](https://github.com/pnpm/pnpm/releases) - [Commits](https://github.com/pnpm/pnpm/commits/v12.14.0/pnpm/npm/pnpm) Updates `protobufjs` from 8.8.0 to 8.8.1 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v8.8.0...protobufjs-v8.8.1) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) --- updated-dependencies: - dependency-name: "@anthropic-ai/claude-agent-sdk" dependency-version: 0.3.303 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: "@aws/durable-execution-sdk-js" dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@aws/durable-execution-sdk-js-testing" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@opentelemetry/exporter-jaeger" dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@opentelemetry/instrumentation-express" dependency-version: 0.71.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/auth-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/functions-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/postgrest-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/realtime-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/storage-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@supabase/supabase-js" dependency-version: 2.118.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: google-gax dependency-version: 6.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: graphql-jit dependency-version: 0.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: mercurius dependency-version: 16.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: npm dependency-version: 12.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: pnpm dependency-version: 12.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: protobufjs dependency-version: 8.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner October 22, 2026 00:56

dependabot Bot added the dependabot label Oct 22, 2026

dependabot Bot requested review from wconti27 and removed request for a team October 22, 2026 00:56

dependabot Bot added dependencies javascript Pull requests that update javascript code semver-patch labels Oct 22, 2026

dd-octo-sts Bot approved these changes Oct 22, 2026

View reviewed changes

dd-octo-sts Bot enabled auto-merge (squash) October 22, 2026 00:56

github-actions Bot removed dependencies javascript Pull requests that update javascript code dependabot labels Oct 22, 2026

chatgpt-codex-connector Bot reviewed Oct 22, 2026

View reviewed changes

datadog-datadog-prod-us1-2 Bot reviewed Oct 22, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/test-versions-86f1b86e39 branch from 7194611 to bf56be8 Compare October 22, 2026 09:43

dd-octo-sts Bot approved these changes Oct 22, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): bump the test-versions group across 1 directory with 23 updates - #10871

chore(deps): bump the test-versions group across 1 directory with 23 updates#10871
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/test-versions-86f1b86e39

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

dd-octo-sts Bot commented Oct 22, 2026

Uh oh!

datadog-datadog-prod-us1-2 Bot commented Oct 22, 2026 •

edited by datadog-datadog-prod-us1 Bot

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Oct 22, 2026

Uh oh!

datadog-datadog-prod-us1-2 Bot left a comment

Uh oh!

datadog-datadog-prod-us1-2 Bot Oct 22, 2026

Uh oh!

pr-commenter Bot commented Oct 22, 2026 •

edited

Loading

Explanation

More details about the CI and significant changes

Unstable benchmarks

scenario:appsec-appsec-enabled-20

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-26

scenario:openfeature-scale-full-24

scenario:openfeature-scale-full-26

scenario:test-optimization-wide-tags-24

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Package	Published version	Prepared version
`@aws/durable-execution-sdk-js`	2.6.0	2.7.0
`@aws/durable-execution-sdk-js-otel`	1.1.0	1.2.0
`@aws/durable-execution-sdk-js-testing`	1.3.0	1.3.1

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.3.303

What's changed

Update

v0.3.302

What's changed

Update

v0.3.301

What's changed

Update

0.3.303

0.3.302

0.3.301

0.3.300

0.3.299

0.3.298

0.3.297

sdk-2.7.0 / otel-1.2.0 / test-1.3.1

@​aws/durable-execution-sdk-js

Why Upgrade

What's Changed

@​aws/durable-execution-sdk-js-otel

Why Upgrade

What's Changed

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

v2.12.0

2.12.0

🚀 Features

🏠 Internal

CHANGELOG

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

3.0.0

💥 Breaking Changes

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

0.71.1 (2026-10-15)

Bug Fixes

0.71.0 (2026-10-06)

Features

Dependencies

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

🩹 Fixes

❤️ Thank You

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

🩹 Fixes

❤️ Thank You

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

2.118.0 (2026-10-15)

2.117.3 (2026-10-07)

v2.118.0

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading

`@aws/durable-execution-sdk-js`

`@aws/durable-execution-sdk-js-otel`

chatgpt-codex-connector Bot commented Oct 22, 2026 •

edited

Loading