chore(deps): bump the npm-dependencies group across 1 directory with 17 updates

[dependabot]

Bumps the npm-dependencies group with 17 updates in the / directory:

Package	From	To
@commitlint/cli	21.1.0	21.2.0
@commitlint/config-conventional	21.1.0	21.2.0
prettier	3.8.4	3.9.4
@opentelemetry/exporter-trace-otlp-http	0.217.0	0.219.0
@opentelemetry/instrumentation-express	0.57.1	0.67.0
@opentelemetry/instrumentation-http	0.217.0	0.219.0
@opentelemetry/instrumentation-undici	0.21.0	0.29.0
@opentelemetry/sdk-node	0.217.0	0.219.0
@supabase/supabase-js	2.108.2	2.109.0
@x402/core	2.16.0	2.17.0
@x402/express	2.16.0	2.17.0
@x402/fetch	2.16.0	2.17.0
@x402/stellar	2.16.0	2.17.0
openai	6.44.0	6.45.0
i18next	26.3.3	26.3.4
autoprefixer	10.5.1	10.5.2
postcss	8.5.15	8.5.16

Updates @commitlint/cli from 21.1.0 to 21.2.0

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.0

21.2.0 (2026-06-30)

Features

• feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9/v10) by @​escapedcat in conventional-changelog/commitlint#4859

Chore

• ci: install git in stock-Ubuntu baseline job by @​escapedcat in conventional-changelog/commitlint#4847

Full Changelog: conventional-changelog/commitlint@v21.1.0...v21.2.0

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Commits

• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• See full diff in compare view

Updates @commitlint/config-conventional from 21.1.0 to 21.2.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.0

21.2.0 (2026-06-30)

Features

• feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9/v10) by @​escapedcat in conventional-changelog/commitlint#4859

Chore

• ci: install git in stock-Ubuntu baseline job by @​escapedcat in conventional-changelog/commitlint#4847

Full Changelog: conventional-changelog/commitlint@v21.1.0...v21.2.0

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Commits

• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• See full diff in compare view

Updates prettier from 3.8.4 to 3.9.4

Release notes

Sourced from prettier's releases.

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@​content(icon) {
<span>Icon!</span>
}
@​content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@​content (icon) {
<span>Icon!</span>
}
@​content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

</tr></table> 

... (truncated)

Commits

• b693cb2 Release 3.9.4
• 2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
• abed2c2 Bump Prettier dependency to 3.9.3
• 6cfbc00 Clean changelog_unreleased
• 3732e1d Release 3.9.3
• a74a7b0 Allow decorators to be used with declare on class fields (#19492)
• bd9e11a Correct text identification in liquid syntax (#19489)
• 269eee3 Bump Prettier dependency to 3.9.1
• ec7ccd1 Clean changelog_unreleased
• c47654c Release 3.9.1
• Additional commits viewable in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.217.0 to 0.219.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

• fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
  • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
• fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
• feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
• fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

• feat(sdk-node): wire up metric producers from declarative config #6712 @​MikeGoldsmith
• feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @​pichlermarc

🐛 Bug Fixes

• fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
• fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
• fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
• fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
• fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
• fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
• fix(browser-detector): user agent resource attribute always #6754 @​david-luna
• fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
• fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
• fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

• docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

• refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

• feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
• feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
• feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

• refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @​david-luna

... (truncated)

Commits

• 13a035b chore: prepare next release (#6756)
• 4b13587 Merge commit from fork
• 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
• 555fca6 Update renovate.json to use matchManagers (#6141)
• b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
• da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
• 002267b chore: complete the move to the smaller SPDX license header (#6791)
• 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
• 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
• bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
• Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-express from 0.57.1 to 0.67.0

Release notes

Sourced from @​opentelemetry/instrumentation-express's releases.

instrumentation-redis: v0.67.0

0.67.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

instrumentation-pino: v0.65.0

0.65.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

instrumentation-net: v0.63.0

0.63.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-nestjs-core: v0.65.0

0.65.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-mysql: v0.65.0

0.65.0 (2026-06-11)

... (truncated)

Changelog

Sourced from @​opentelemetry/instrumentation-express's changelog.

0.67.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

0.66.0 (2026-05-13)

Features

• deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.64.0 to ^0.65.0

0.65.0 (2026-05-06)

Features

• deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.63.0 to ^0.64.0

0.64.0 (2026-04-29)

Features

• deps: update deps matching '@opentelemetry/*' (#3497) (a91133a)

... (truncated)

Commits

• bd017c8 chore: release main (#3451)
• 8891261 feat(deps): update deps matching '@opentelemetry/*' (#3479)
• 36a030c chore: switch to short license header (#3476)
• fb1f127 fix(instrumentation-express): end span on close event rather than finish (#3462)
• ed97091 chore: release main (#3415)
• c8df394 feat(deps): update deps matching '@opentelemetry/*' (#3450)
• 92313a7 fix(instrumentation-express): propagate baggage in middleware (#3437)
• 39f08c3 chore: release main (#3410)
• 7f4b776 feat(deps): update deps matching "@opentelemetry/*" (#3411)
• 0b33a11 chore: release main (#3365)
• Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-http from 0.217.0 to 0.219.0

Release notes

Sourced from @​opentelemetry/instrumentation-http's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

• fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
  • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
• fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
• feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
• fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

• feat(sdk-node): wire up metric producers from declarative config #6712 @​MikeGoldsmith
• feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @​pichlermarc

🐛 Bug Fixes

• fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
• fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
• fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
• fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
• fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
• fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
• fix(browser-detector): user agent resource attribute always #6754 @​david-luna
• fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
• fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
• fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

• docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

• refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

• feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
• feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
• feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

• refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @​david-luna

... (truncated)

Commits

• 13a035b chore: prepare next release (#6756)
• 4b13587 Merge commit from fork
• 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
• 555fca6 Update renovate.json to use matchManagers (#6141)
• b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
• da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
• 002267b chore: complete the move to the smaller SPDX license header (#6791)
• 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
• 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
• bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
• Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-undici from 0.21.0 to 0.29.0

Release notes

Sourced from @​opentelemetry/instrumentation-undici's releases.

instrumentation-undici: v0.29.0

0.29.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

instrumentation-kafkajs: v0.28.0

0.28.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

winston-transport: v0.29.0

0.29.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)
• instrumentation-winston: use Logs API exception field when translating winston error records (#3441) (1940b77)

resource-detector-azure: v0.27.0

0.27.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

• The following workspace dependencies were updated
  • devDependencies
    • @​opentelemetry/contrib-test-utils bumped from ^0.65.0 to ^0.66.0

instrumentation-undici: v0.28.0

0.28.0 (2026-05-13)

... (truncated)

Changelog

Sourced from @​opentelemetry/instrumentation-undici's changelog.

0.29.0 (2026-06-11)

Features

• deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

0.28.0 (2026-05-13)

Features

• deps: update deps matching '@opentelemetry/*' (#3523) (e26a90a)

0.27.0 (2026-05-06)

Features

• deps: update deps matching '@opentelemetry/*' (#3507) (e1ef3d1)

Bug Fixes

• instrumentation-undici: do not record aborted requests as errors (#3488) (cdaefde)

0.26.0 (2026-04-29)

Features

• deps: update deps matching '@opentelemetry/*' (#3497) (a91133a)

0.25.0 (2026-04-17)

Features

• deps: update deps matching '@opentelemetry/*' (#3479) (8891261)

0.24.0 (2026-03-25)

Features

• deps: update deps matching '@opentelemetry/*' (#3450) (c8df394)

0.23.0 (2026-03-04)

... (truncated)

Commits

• See full diff in compare view

Updates @opentelemetry/sdk-node from 0.217.0 to 0.219.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

• fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
  • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
• fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
• feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
• fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

• feat(sdk-node): wire up metric producers from declarative config #6712 @​MikeGoldsmith
• feat(sdk-logs)!: add support for attributes in LoggerOptions #6573 @​pichlermarc

🐛 Bug Fixes

• fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
• fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
• fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
• fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
• fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
• fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
• fix(browser-detector): user agent resource attribute always #6754 @​david-luna
• fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
• fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
• fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

• docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

• refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

• feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
• feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
• feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

• refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @​david-luna

... (truncated)

Commits

• 13a035b chore: prepare next release (#6756)
• 4b13587 Merge commit from fork
• 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
• 555fca6 Update renovate.json to use matchManagers (#6141)
• b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
• da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
• 002267b chore: complete the move to the smaller SPDX license header (#6791)
• 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
• 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
• bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
• Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.108.2 to 2.109.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.109.0

2.109.0 (2026-06-30)

🚀 Features

• auth: add custom_claims_allowlist to custom providers admin API (#2473)
• realtime: add postgres_changes filter builder, new operators and select (#2463)
• storage: expose purgeCache for buckets and single objects (#2429)

🩹 Fixes

• functions: honor a caller's Content-Type override regardless of casing (#2455)
• realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)
• realtime: add replication connection system message option (#2470)
• storage: keep sortBy defaults when list() is given a partial sortBy (#2454)

❤️ Thank You

• Anubhav Anand @​i-anubhav-anand
• Cemal Kılıç @​cemalkilic
• Claude Opus 4.8 (1M context)
• Filipe Cabaço @​filipecabaco
• Katerina Skroumpelou @​mandarini
• Lenny
• Rodrigo Mansueli @​mansueli

v2.108.3-canary.2

2.108.3-canary.2 (2026-06-19)

This was a version bump only, there were no code changes.

v2.108.3-canary.1

2.108.3-canary.1 (2026-06-18)

🩹 Fixes

• functions: honor a caller's Content-Type override regardless of casing (#2455)
• storage: keep sortBy defaults when list() is given a partial sortBy (#2454)

❤️ Thank You

• Anubhav Anand @​i-anubhav-anand

v2.108.3-canary.0

2.108.3-canary.0 (2026-06-17)

🩹 Fixes

• realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.109.0 (2026-06-30)

🩹 Fixes

• realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

Commits

• dd2d4c2 fix(realtime): pin @​supabase/phoenix and browser test CDN deps (#2457)
• a25062e chore(release): version 2.108.2 changelogs (#2449)
• b3e5f2d chore(ci): unpin realtime version (#2432)
• See full diff in compare view

Updates @x402/core from 2.16.0 to 2.17.0

Commits

• 2b4f50e chore(go): release (#2716)
• c4a9440 chore: version python package (#2715)
• bd6298d chore: version typescript packages (#2714)
• 885e674 add e2e lockfile check (#2708)
• 0a4a412 ccd fast-follow (#2712)
• 0d00282 Batch settlement: facilitator setup docs + Go example link (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.