[dependabot]

Bumps the opentelemetry group with 5 updates:

Package	From	To
@opentelemetry/core	2.11.0	2.12.0
@opentelemetry/exporter-trace-otlp-http	0.222.0	0.223.0
@opentelemetry/resources	2.11.0	2.12.0
@opentelemetry/sdk-trace-base	2.11.0	2.12.0
@opentelemetry/sdk-trace-node	2.11.0	2.12.0

Updates @opentelemetry/core from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.12.0

2.12.0

🚀 Features

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/core's changelog.

2.12.0

🏠 Internal

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

• 92b844e chore: prepare next v2.x release (#7151)
• a859aff fix(web-common): export getElementXPath utility (#7124)
• 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
• d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
• 5bd476e chore: move context manager to sdk-trace (#7086)
• 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
• 788922c ci: support maintenance branch releases (#7036)
• See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

• chore(web-common)!: clean up and deprecate network span utils #7114
  • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
  • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

• refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

• 92b844e chore: prepare next v2.x release (#7151)
• a859aff fix(web-common): export getElementXPath utility (#7124)
• 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
• d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
• 5bd476e chore: move context manager to sdk-trace (#7086)
• 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
• 788922c ci: support maintenance branch releases (#7036)
• See full diff in compare view

Updates @opentelemetry/resources from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.12.0

2.12.0

🚀 Features

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/resources's changelog.

2.12.0

🏠 Internal

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

• 92b844e chore: prepare next v2.x release (#7151)
• a859aff fix(web-common): export getElementXPath utility (#7124)
• 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
• d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
• 5bd476e chore: move context manager to sdk-trace (#7086)
• 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
• 788922c ci: support maintenance branch releases (#7036)
• See full diff in compare view

Updates @opentelemetry/sdk-trace-base from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/sdk-trace-base's releases.

v2.12.0

2.12.0

🚀 Features

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/sdk-trace-base's changelog.

2.12.0

🏠 Internal

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

• 92b844e chore: prepare next v2.x release (#7151)
• a859aff fix(web-common): export getElementXPath utility (#7124)
• 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
• d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
• 5bd476e chore: move context manager to sdk-trace (#7086)
• 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
• 788922c ci: support maintenance branch releases (#7036)
• See full diff in compare view

Updates @opentelemetry/sdk-trace-node from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/sdk-trace-node's releases.

v2.12.0

2.12.0

🚀 Features

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @​opentelemetry/sdk-trace-node's changelog.

2.12.0

🏠 Internal

• chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
• feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
  • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Commits

• 92b844e chore: prepare next v2.x release (#7151)
• a859aff fix(web-common): export getElementXPath utility (#7124)
• 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
• d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
• 5bd476e chore: move context manager to sdk-trace (#7086)
• 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
• 788922c ci: support maintenance branch releases (#7036)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

LGTM. This is a routine OpenTelemetry minor bump, and the lockfile matches package.json.

What was reviewed:

• All five specifiers in package.json and the pnpm-lock importers agree. The transitive OTel packages all moved together to 2.12.0 / 0.223.0, so no version is left duplicated.
• The @ langfuse/otel 5.11.1 peer ranges (core ^2.0.1, exporter >=0.202.0 <1.0.0, sdk-trace-base ^2.0.1) still cover the new versions.
• The one breaking change in 0.223.0 removes network-span utilities from web-common. This plugin doesn't use them: the source imports only api, sdk-trace-node and sdk-trace-base, and the exporter is used only through @ langfuse/otel.
• The lockfile also picks up a few unrelated dev-tooling updates (postcss 8.5.30, nanoid 3.3.20, source-map-js 1.2.2, @ napi-rs/wasm-runtime 1.2.5) and new deprecation notices on the yuku binding packages. All are patch-level and none ship at runtime.

Extended reasoning...

The change touches only package.json and pnpm-lock.yaml. It raises the minimum versions of five OpenTelemetry dependencies, and the lockfile was regenerated to match, including the transitive OTel packages and a few dev-tooling patch updates. There is no source change and no auth, crypto or data-handling code involved. The lockfile is consistent with the specifiers, and the peer ranges declared by @ langfuse/otel still accept the new versions. The repo has no CODEOWNERS file and the PR has no reviewer objections, so this is a mechanical, low-risk change.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.