chore(deps): bump the vercel group across 1 directory with 7 updates by dependabot[bot] · Pull Request #9275 · nodejs/nodejs.org

dependabot · 2026-11-01T17:17:44Z

Bumps the vercel group with 7 updates in the / directory:

Package	From	To
turbo	`2.11.3`	`2.11.10`
next-intl	`4.14.7`	`4.14.9`
@next/eslint-plugin-next	`16.3.6`	`16.4.3`
@opentelemetry/api-logs	`0.222.0`	`0.223.0`
@opentelemetry/instrumentation	`0.222.0`	`0.300.0`
@opentelemetry/sdk-logs	`0.222.0`	`3.0.0`
next	`16.3.6`	`16.4.3`

Updates turbo from 2.11.3 to 2.11.10

Release notes

Sourced from turbo's releases.

Turborepo v2.11.10

What's Changed

Changelog

fix: Allow non-recursive Turbo commands in root tasks by @sahyl in vercel/turborepo#14814

chore: Release Turborepo 2.11.9 by @github-actions[bot] in vercel/turborepo#14824

chore(deps): Update dependency @vercel/geistdocs to v2 by @vercel-gh-bot-4[bot] in vercel/turborepo#14417

chore: Update with-gatsby example by @vercel-gh-bot-3[bot] in vercel/turborepo#14796

fix: Avoid pnpm batch-shim shutdown hangs on Windows by @sahyl in vercel/turborepo#14819

chore(deps): Update dependency @vercel/geistdocs to v2.11.0 by @vercel-gh-bot-3[bot] in vercel/turborepo#14832

fix: Exclude tool-managed directories from local dependency inputs by @PedroRosalba in vercel/turborepo#14696

fix: Match git's text=auto binary detection in file hashing by @PedroRosalba in vercel/turborepo#14697

fix: Drop @react-router/dev from Remix match list by @Pcmhacker-piro in vercel/turborepo#14800

fix: Match package configuration files and directory inputs in task-level affected detection by @PedroRosalba in vercel/turborepo#14804

fix: Parse pnpm 8 single-project lockfiles by @PedroRosalba in vercel/turborepo#14806

fix: Keep task env vars in the hash when globalEnv excludes inferred vars by @PedroRosalba in vercel/turborepo#14805

docs: Generate the sitemap from Geistdocs sources by @molebox in vercel/turborepo#14865

fix: Restore cached symlinks when outputs are already on disk by @PedroRosalba in vercel/turborepo#14807

chore: Remove CODEOWNERS file by @anthonyshew with @Copilot in vercel/turborepo#14810

feat: Enable WebMCP for Turborepo docs by @anthonyshew in vercel/turborepo#14828

fix: Exit quietly when turbo ls output is piped to a closed reader by @drakeo338 in vercel/turborepo#14868

fix: Distrust compromised eMudhra intermediate certificates by @anthonyshew in vercel/turborepo#14876

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

Turborepo v2.11.9

What's Changed

Changelog

chore: Release Turborepo 2.11.8 by @github-actions[bot] in vercel/turborepo#14789

perf: Prefetch Cargo metadata during lazy graph construction by @anthonyshew in vercel/turborepo#14497

perf: Compute Berry lockfile closures once across workspaces by @anthonyshew in vercel/turborepo#14499

perf: Check cache hit outputs in place instead of on the blocking pool by @anthonyshew in vercel/turborepo#14524

perf: Speed up Berry lockfile loading by @anthonyshew in vercel/turborepo#14500

perf: Parse bun.lock without building a JSON syntax tree by @anthonyshew in vercel/turborepo#14502

perf: Skip the dry run cache batch window when there is no remote cache by @anthonyshew in vercel/turborepo#14505

perf: Emit lockfile closures pre-sorted and cheapen closure interning by @anthonyshew in vercel/turborepo#14525

perf: Reuse configuration derived from turbo.json between the shim and the CLI by @anthonyshew in vercel/turborepo#14521

feat: Report locked tools-only setup plans by @anthonyshew in vercel/turborepo#14483

perf: Compute Bun lockfile closures once across workspaces by @anthonyshew in vercel/turborepo#14501

perf: Reuse open parent directories when restoring cache archives by @anthonyshew in vercel/turborepo#14506

perf: Skip dropping the run right before turbo run exits by @anthonyshew in vercel/turborepo#14507

perf: Match literal input exclusions without compiling globs by @anthonyshew in vercel/turborepo#14510

perf: Copy pruned package files in parallel by @anthonyshew in vercel/turborepo#14512

feat: Report proposed first-lock and refresh setup plans by @anthonyshew in vercel/turborepo#14571

perf: Compress large cache archives with multithreaded zstd by @anthonyshew in vercel/turborepo#14698

perf: Read tracked file stats from directory listings on Windows by @anthonyshew in vercel/turborepo#14633

... (truncated)

Commits

e521641 publish 2.11.10 to registry
aaf5a3a fix: Distrust compromised eMudhra intermediate certificates (#14876)
9816503 fix: Exit quietly when turbo ls output is piped to a closed reader (#14868)
af866e5 feat: Enable WebMCP for Turborepo docs (#14828)
b42cc68 chore: Remove CODEOWNERS file (#14810)
921155f fix: Restore cached symlinks when outputs are already on disk (#14807)
9330903 docs: Generate the sitemap from Geistdocs sources (#14865)
6048038 fix: Keep task env vars in the hash when globalEnv excludes inferred vars (#1...
57ecce3 fix: Parse pnpm 8 single-project lockfiles (#14806)
d926d6a fix: Match package configuration files and directory inputs in task-level aff...
Additional commits viewable in compare view

Updates next-intl from 4.14.7 to 4.14.9

Release notes

Sourced from next-intl's releases.

v4.14.9

4.14.9 (2026-10-02)

Bug Fixes

Improvements for useExtracted (#2431) (0454168) – by @amannn

v4.14.8

4.14.8 (2026-09-29)

Bug Fixes

Keep source order for useExtracted messages on the same line (#2426) (3ef2e6a) – by @amannn

Changelog

Sourced from next-intl's changelog.

4.14.9 (2026-10-02)

Bug Fixes

Improvements for useExtracted (#2431) (0454168) – by @amannn

4.14.8 (2026-09-29)

Bug Fixes

Keep source order for useExtracted messages on the same line (#2426) (3ef2e6a) – by @amannn

Commits

b9fc98a v4.14.9
0454168 fix: Improvements for useExtracted (#2431)
1244f54 fix: Correct source paths in useExtracted source maps with Turbopack (#2432)
4932295 fix: Support webpack builds with source maps when using useExtracted (#2430)
fac95ab docs: Clarify cookie writing with localeDetection: false and add a third `a...
274867f v4.14.8
3ef2e6a fix: Keep source order for useExtracted messages on the same line (#2426)
edcfaf3 docs: Upgrade Next.js to 16.3.6 in examples and dev deps (GHSA-vcvr-r3jv-pc5j...
See full diff in compare view

Updates @next/eslint-plugin-next from 16.3.6 to 16.4.3

Release notes

Sourced from @next/eslint-plugin-next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

... (truncated)

Commits

29bbeab v16.4.3
2864b17 v16.4.2
7217011 v16.4.1
e273d5b v16.4.0
c3e76ad v16.4.0-canary.63
ccf8c15 v16.4.0-canary.62
27ee721 v16.4.0-canary.61
cdf6866 v16.4.0-canary.60
ba80ee4 v16.4.0-canary.59
1bcedb4 v16.4.0-canary.58
Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/instrumentation from 0.222.0 to 0.300.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.300.0

0.300.0

Summary

The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.

The public interface has changed

for notes on migrating to 3.x / 0.300.x see the upgrade guide

Only stable versions 3.0.0 are compatible with this release

💥 Breaking Changes

chore(shim-opencensus)!: remove the @opentelemetry/shim-opencensus package

In the OpenTelemetry Specification v1.58.0 the OpenCensus compatibility requirements were deprecated. The JavaScript OpenCensus shim package will not receive any more releases after the current 0.222.0 release (source code for last release).

feat(instrumentation-http)!: remove deprecated serverName field from HttpInstrumentationConfig #7081

The serverName option had no effect; stable HTTP semantic conventions do not include http.server_name. Remove it from any setConfig() or constructor call.

feat(sdk-node)!: remove deprecated NodeSDKConfiguration fields logRecordProcessor, metricReader, spanProcessor and deprecated namespace re-exports node, tracing

NodeSDKConfiguration.logRecordProcessor — use logRecordProcessors instead.

NodeSDKConfiguration.metricReader — use metricReaders instead.

NodeSDKConfiguration.spanProcessor — use spanProcessors instead.

export * as node from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-node instead.

export * as tracing from '@opentelemetry/sdk-node' — import directly from @opentelemetry/sdk-trace-base instead.

feat(sdk-logs)!: remove deprecated SdkLogRecord type alias and LoggerProviderConfig type alias #7062

SdkLogRecord — use ReadWriteLogRecord instead.

LoggerProviderConfig — use LoggerProviderOptions instead.

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/sdk-logs/build/src/... or @opentelemetry/sdk-logs/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

Packages that ship separate Node.js and browser implementations export them under explicit subpaths, for example @opentelemetry/sdk-logs/platform. If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(sdk-node)!: remove "jaeger" propagator from @opentelemetry/sdk-node #7077

OTEL_PROPAGATORS=jaeger and { jaeger: null } in the configuration object are no longer recognised. Replace with "tracecontext".

See the 3.x migration guide for full instructions.

fix(opentelemetry-exporter-prometheus)!: default exporter host to localhost #6599 @cjihrig

chore!: bump minimum node.js version to >=22.15.0

feat(api-logs)!: move the Logs API to @opentelemetry/api and remove the standalone @opentelemetry/api-logs package #4862 @hectorhdzg

fix(exporter-prometheus)!: stop reading Prometheus exporter host and port environment variables in the exporter constructor #6966 @LarryHu0217

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

feat(sdk-node)!: drop SDK package re-exports (api, contextBase, core, logs, metrics, resources) #7111 @pichlermarc

api / contextBase → import from @opentelemetry/api

core → import from @opentelemetry/core

logs → import from @opentelemetry/sdk-logs

metrics → import from @opentelemetry/sdk-metrics

resources → import from @opentelemetry/resources

feat(sdk-logs): mark @opentelemetry/sdk-logs as stable #7143 @trentm

See the stable CHANGELOG for future changes to the sdk-logs package.

... (truncated)

Commits

12a5817 chore: prepare next release (#7213)
2a97587 docs: 3.x migration doc edits (#7216)
ebefa76 chore(deps): update dependency eslint to v10.13.0 (#7129)
83b6922 chore(deps): update dependency superagent to v10.4.1 (#7184)
68e9e6e fix(otlp-exporter-base): pick fetch mode from the document origin, not locati...
7d2455e build: lint for unused dependencies with knip (#7200)
5e65e0e fix(core): no longer drop an attribute value that is an object that has `un...
2fbb404 chore(deps): dedupe nx to 23.3.0 (#7205)
c971f52 docs(changelog): trim unreleased entries (#7203)
2516215 feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...
Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.222.0 to 3.0.0

Release notes

Sourced from @opentelemetry/sdk-logs's releases.

v3.0.0

3.0.0

Summary

The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.

The public interface has changed

for notes on migrating to 3.x / 0.300.x see the upgrade guide

Only experimental versions 0.300.0 are compatible with this release

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.58.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.11.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

Packages that ship separate Node.js and browser implementations export them under explicit subpaths, for example @opentelemetry/core/platform. If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

feat(exporter-jaeger)!: remove @opentelemetry/exporter-jaeger package

The Jaeger exporter has been removed. Jaeger has deprecated its custom Thrift collection protocols in favor of standard OpenTelemetry Protocol (OTLP). Use standard OTLP exporters instead.

See the 3.x migration guide for full instructions.

chore!: bump minimum node.js version to >=22.15.0

chore(sdk-trace-base, sdk-trace-web)!: remove the @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-web packages #7117

The sdk-trace-base, sdk-trace-web, and sdk-trace-node packages have been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

feat!: replace the browser field in package.json with #platform subpath imports #7141 @overbalance

Resolvers with the node condition load the Node.js build; all others load the browser build. Bundlers without imports support fail; see the migration guide.

webpack needs 5.54 or later. Parcel needs package exports enabled and cannot resolve #platform from require().

Root type declarations describe the Node.js build.

feat(resources)!: remove the ./detectors/platform and ./detectors/platform/browser subpath exports; import from the package root #7141 @overbalance

feat(core, sdk-trace, sdk-logs, exporter-zipkin)!: remove the ./platform and ./platform/browser subpath exports; import from the package root #7141 @overbalance

fix(sdk-logs)!: replace LoggerConfig.disabled with enabled to match the specification #7160

Replace disabled: true with enabled: false, and disabled: false with enabled: true. Loggers remain enabled by default.

... (truncated)

Changelog

Sourced from @opentelemetry/sdk-logs's changelog.

3.0.0

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.56.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.12.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

feat(exporter-jaeger)!: remove @opentelemetry/exporter-jaeger package

The Jaeger exporter has been removed. Jaeger has deprecated its custom Thrift collection protocols in favor of standard OpenTelemetry Protocol (OTLP). Use standard OTLP exporters instead.

See the 3.x migration guide for full instructions.

chore!: bump minimum node.js version to >=22.15.0

chore(sdk-trace-base, sdk-trace-web)!: remove the @opentelemetry/sdk-trace-base and @opentelemetry/sdk-trace-web packages #7117

The sdk-trace-base, sdk-trace-web, and sdk-trace-node packages have been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

feat!: replace the browser field in package.json with #platform subpath imports #7141 @overbalance

Resolvers with the node condition load the Node.js build; all others load the browser build. Bundlers without imports support fail; see the migration guide.

webpack needs 5.54 or later. Parcel needs package exports enabled and cannot resolve #platform from require().

Root type declarations describe the Node.js build.

feat(resources)!: remove the ./detectors/platform and ./detectors/platform/browser subpath exports; import from the package root #7141 @overbalance

feat(core, sdk-trace, sdk-logs, exporter-zipkin)!: remove the ./platform and ./platform/browser subpath exports; import from the package root #7141 @overbalance

fix(sdk-logs)!: replace LoggerConfig.disabled with enabled to match the specification #7160

Replace disabled: true with enabled: false, and disabled: false with enabled: true. Loggers remain enabled by default.

🚀 Features

feat(sdk-metrics): stabilize maxExportBatchSize option in PeriodicExportingMetricReader

chore(sdk-logs): mark @opentelemetry/sdk-logs as stable #7143 @trentm

feat(sdk-trace, sdk-logs): add the browser-only disableAutoFlushOnDocumentHide to BatchSpanProcessorOptions and BatchLogRecordProcessorOptions, deprecate BatchSpanProcessorBrowserOptions and BatchLogRecordProcessorBrowserOptions #7140 @overbalance

🐛 Bug Fixes

... (truncated)

Commits

12a5817 chore: prepare next release (#7213)
2a97587 docs: 3.x migration doc edits (#7216)
ebefa76 chore(deps): update dependency eslint to v10.13.0 (#7129)
83b6922 chore(deps): update dependency superagent to v10.4.1 (#7184)
68e9e6e fix(otlp-exporter-base): pick fetch mode from the document origin, not locati...
7d2455e build: lint for unused dependencies with knip (#7200)
5e65e0e fix(core): no longer drop an attribute value that is an object that has `un...
2fbb404 chore(deps): dedupe nx to 23.3.0 (#7205)
c971f52 docs(changelog): trim unreleased entries (#7203)
2516215 feat(instrumentation)!: make InstrumentationBase#_enabled protected on both p...
Additional commits viewable in compare view

Updates next from 16.3.6 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[lts-active] Fix extensionless Google font URLs in both bundlers (#100277)

[lts-active] Don't load the app-page runtime in proxy.ts (#100423)

[lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)

[lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)

[lts-active] test: Pin react-virtualized (#100545)

[lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)

[lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)

[lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @mischnic, @lukesandberg, @acdlite, @eps1lon, and @sokra for helping!

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport doc...
Description has been truncated

vercel · 2026-11-01T17:17:47Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
nodejs-org	Ready	Preview	Nov 1, 2026 6:42pm UTC

codecov · 2026-11-01T17:19:13Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.97%. Comparing base (1bc3ed6) to head (e4374f6).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9275   +/-   ##
=======================================
  Coverage   86.97%   86.97%           
=======================================
  Files          88       88           
  Lines        6356     6356           
  Branches      386      386           
=======================================
  Hits         5528     5528           
  Misses        824      824           
  Partials        4        4

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

github-actions · 2026-11-01T17:23:53Z

📦 Build Size Comparison

Summary

Metric	Value
Old Total First Load JS	7.23 MB
New Total First Load JS	7.19 MB
Delta	-41.04 KB (-0.55%)

Changes

🔄 Modified Routes (5)

Route	Old First Load JS	New First Load JS	Delta
`/[locale]`	1.70 MB	1.69 MB	📉 -10.97 KB (-0.63%)
`/[locale]/[...path]`	1.70 MB	1.69 MB	📉 -10.97 KB (-0.63%)
`/[locale]/blog/[...path]`	1.70 MB	1.69 MB	📉 -10.97 KB (-0.63%)
`/[locale]/download/archive/[version]`	1.70 MB	1.69 MB	📉 -10.97 KB (-0.63%)
`/_not-found`	444.31 KB	447.15 KB	📈 2.84 KB (+0.64%)

Bumps the vercel group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.11.3` | `2.11.10` | | [next-intl](https://github.com/amannn/next-intl) | `4.14.7` | `4.14.9` | | [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.3.6` | `16.4.3` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.300.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `3.0.0` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.4.3` | Updates `turbo` from 2.11.3 to 2.11.10 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.3...v2.11.10) Updates `next-intl` from 4.14.7 to 4.14.9 - [Release notes](https://github.com/amannn/next-intl/releases) - [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md) - [Commits](amannn/next-intl@v4.14.7...v4.14.9) Updates `@next/eslint-plugin-next` from 16.3.6 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.3/packages/eslint-plugin-next) Updates `@opentelemetry/api-logs` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/instrumentation` from 0.222.0 to 0.300.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.300.0) Updates `@opentelemetry/sdk-logs` from 0.222.0 to 3.0.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...v3.0.0) Updates `next` from 16.3.6 to 16.4.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.4.3) --- updated-dependencies: - dependency-name: "@next/eslint-plugin-next" dependency-version: 16.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: vercel - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vercel - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.300.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vercel - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: vercel - dependency-name: next dependency-version: 16.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: vercel - dependency-name: next-intl dependency-version: 4.14.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vercel - dependency-name: turbo dependency-version: 2.11.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vercel ... Signed-off-by: dependabot[bot] <[email protected]>

@vercel/otel 2.x peers on @opentelemetry/instrumentation and @opentelemetry/sdk-logs at >=0.200.0 <0.300.0, but the vercel group moved them to 0.300.0 and 3.0.0. 0.223.0 is the newest release in that range and matches the api-logs bump. The Dependabot ignores stop the group from pulling them past it again until @vercel/otel widens its peers. Assisted-by: Claude Opus 5.5 <[email protected]>

dependabot Bot added the auto-merge Ready to automatically merge after being open for 48 hours label Nov 1, 2026

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026

dependabot Bot requested a review from a team as a code owner November 1, 2026 17:17

dependabot Bot added github_actions:pull-request Trigger Pull Request Checks javascript Pull requests that update javascript code labels Nov 1, 2026

dependabot Bot requested a review from a team as a code owner November 1, 2026 17:17

github-actions Bot removed the github_actions:pull-request Trigger Pull Request Checks label Nov 1, 2026

vercel Bot deployed to Preview November 1, 2026 17:18

View deployment

dependabot Bot changed the title ~~chore(deps): bump the vercel group with 7 updates~~ chore(deps): bump the vercel group across 1 directory with 7 updates Nov 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-71731ec1c4 branch from 225d1fa to 566e2da Compare November 1, 2026 17:35

vercel Bot deployed to Preview November 1, 2026 17:36

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-71731ec1c4 branch from 566e2da to 1c99f9b Compare November 1, 2026 17:56

vercel Bot deployed to Preview November 1, 2026 17:57

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-71731ec1c4 branch from 1c99f9b to 5f65c37 Compare November 1, 2026 18:13

vercel Bot deployed to Preview November 1, 2026 18:14

View deployment

ovflowd approved these changes Nov 1, 2026

View reviewed changes

ovflowd added the fast-track Fast Tracking PRs label Nov 1, 2026

ovflowd enabled auto-merge November 1, 2026 18:42

vercel Bot deployed to Preview November 1, 2026 18:42

View deployment

ovflowd added this pull request to the merge queue Nov 1, 2026

Merged via the queue into main with commit 775cf1c Nov 1, 2026
19 of 21 checks passed

ovflowd deleted the dependabot/npm_and_yarn/vercel-71731ec1c4 branch November 1, 2026 18:55

Navigation Menu

Repository navigation

chore(deps): bump the vercel group across 1 directory with 7 updates - #9275

chore(deps): bump the vercel group across 1 directory with 7 updates#9275
ovflowd merged 2 commits into
mainfrom
dependabot/npm_and_yarn/vercel-71731ec1c4

dependabot Bot commented on behalf of github Nov 1, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Nov 1, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Nov 1, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.11.10

What's Changed

Changelog

Turborepo v2.11.9

What's Changed

Changelog

v4.14.9

4.14.9 (2026-10-02)

Bug Fixes

v4.14.8

4.14.8 (2026-09-29)

Bug Fixes

4.14.9 (2026-10-02)

Bug Fixes

4.14.8 (2026-09-29)

Bug Fixes

v16.4.3

Core Changes

Credits

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

experimental/v0.300.0

0.300.0

Summary

💥 Breaking Changes

v3.0.0

3.0.0

Summary

💥 Breaking Changes

3.0.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

v16.4.3

Core Changes

Credits

v16.4.2

What's Changed

Uh oh!

vercel Bot commented Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov Bot commented Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Build Size Comparison

Summary

Changes

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 1, 2026 •

edited

Loading

vercel Bot commented Nov 1, 2026 •

edited

Loading

codecov Bot commented Nov 1, 2026 •

edited

Loading

github-actions Bot commented Nov 1, 2026 •

edited

Loading