chore(deps): bump @opentelemetry/sdk-node from 0.214.0 to 0.217.0

[dependabot]

Bumps @opentelemetry/sdk-node from 0.214.0 to 0.217.0.

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.217.0

0.217.0

🚀 Features

• feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @​pichlermarc
• feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @​MikeGoldsmith
• feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @​trentm
  • Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).
  • If log_level is not specified, a diagnostic console logger at "info" level will be setup.
  • An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

• fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @​trentm
• fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @​trentm
• fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @​trentm
• fix(configuration): improve handling of enums in generated types #6659 @​trentm
• fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @​trentm
• fix(sampler-jaeger-remote): add missing axios dep #6656 @​trentm
• fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @​homanp

experimental/v0.216.0

0.216.0

🚀 Features

• feat(sdk-node): wire attribute_keys from declarative configuration to ViewOptions.attributesProcessors #6427 @​ravitheja4531-cell
• feat(sdk-node): set TracerProvider in startNodeSDK() #6607 @​maryliag

🐛 Bug Fixes

• fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
• fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira
• fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @​Maximiliano-Zeballos
• fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @​trentm
• fix(web-common): add limit for timeout #6601 @​maryliag
• fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

🏠 Internal

• test(otlp-transformer): add metrics transform benchmark #6628 @​pichlermarc
• refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @​cjihrig

experimental/v0.215.0

0.215.0

💥 Breaking Changes

... (truncated)

Commits

• 74cde1b chore: prepare next release (#6675)
• e8f439a fix: handle malformed URLs in Prometheus exporter request handler (#6674)
• ab3a2e2 feat(sdk-node, configuration): diag log handling updates for startNodeSDK(), ...
• d5b7d1e fix(deps): update dependency axios to v1.15.2 [security] (#6670)
• c163618 chore(deps): update github/codeql-action digest to e46ed2c (#6661)
• ec2bfbe chore(configuration): move config generation scripts into the configuration p...
• acc9ecd chore(configuration): cosmetic changes to generated types.ts (#6663)
• 8f008ec chore: Move inactive members to emeritus (#6649)
• 435431e fix(configuration): improve the technique for removing '| null' on types due ...
• 4222024 fix(configuration): improve handling of enums in generated types (#6659)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Greptile Summary

This PR bumps @opentelemetry/sdk-node from 0.214.0 to 0.217.0 in the express-github-otel-example app. The lock file update picks up several additional transitive/peer dependency version bumps beyond the primary target.

• @opentelemetry/sdk-node is updated from ^0.214.0 to ^0.217.0 in package.json and resolved in pnpm-lock.yaml.
• The regenerated lock file also bumps yaml from 2.8.3 to 2.9.0 and turbo from 2.9.3 to 2.9.12 across the workspace — these are unrelated to the stated change but were swept in during lock file regeneration.

Confidence Score: 5/5

Safe to merge — the primary change is a routine OpenTelemetry SDK minor bump, and the additional lock file changes to yaml and turbo are non-breaking patch/minor updates.

The @opentelemetry/sdk-node 0.214→0.217 range spans only minor/patch releases with no API-breaking changes to the SDK surface used by this example app. The extra yaml and turbo bumps swept in by lock file regeneration are both non-breaking minor/patch updates. The change is scoped to an example application, so any regression would not affect production SDK packages.

No files require special attention. The extra yaml and turbo version bumps in pnpm-lock.yaml are benign but worth being aware of.

Important Files Changed

Filename	Overview
apps/examples/express-github-otel-example/package.json	Version specifier for @opentelemetry/sdk-node bumped from ^0.214.0 to ^0.217.0; straightforward and intentional.
pnpm-lock.yaml	Lock file updated to resolve @opentelemetry/sdk-node@0.217.0; also sweeps in yaml (2.8.3→2.9.0) and turbo (2.9.3→2.9.12) bumps unrelated to the stated PR intent.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["express-github-otel-example\npackage.json"] -->|"@opentelemetry/sdk-node\n^0.217.0"| B["pnpm-lock.yaml\n(lock file resolution)"]
    B --> C["@opentelemetry/sdk-node@0.217.0"]
    B --> D["yaml@2.9.0\n(transitive bump)"]
    B --> E["turbo@2.9.12\n(transitive bump)"]

Loading

_{Reviews (1): Last reviewed commit: "chore(deps): bump @opentelemetry/sdk-nod..." | Re-trigger Greptile}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
better-webhook-docs	Ready	Preview, Comment	May 11, 2026 3:52pm