[Snyk] Security upgrade @opentelemetry/sdk-node from 0.24.0 to 0.30.0

[bielversallini]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @opentelemetry/sdk-node

The new version differs by 250 commits.

• e39ab88 release proposal 1.4.0/0.30.0 (#3065)
• 474ec86 docs(exporters): replace 'collector' with 'OTLP compatible receivers' (#3077)
• 6dd6af3 docs(grpc-exporters): remove 'web' as supported from README.md (#3070)
• 6eca6d4 feat(sdk-metrics-base): detect resets on async metrics (#2990)
• 4378303 New bug form and triage workflow (#3058)
• 0727ed7 Fix gzip compression for OTLP HTTP exporter (#3046)
• d2de661 feat(sdk-metrics-base): implement min/max recording for Histograms (#3032)
• fa295a3 Add node 18 to tests and remove EoL node versions (#3048)
• b891509 fix(instrumentation): use all provided filepatches (#2963)
• cb642d7 chore: do not mark bugs stale (#3053)
• fcb9565 feat(node-sdk): add serviceName config option (#2867)
• 3cc40d7 feat(opentelemetry-exporter-prometheus): export PrometheusSerializer (#3034)
• 5f9ef51 feat(@ opentelemetry-instrumentation-fetch): optionally ignore network events (#3028)
• c8c4ec6 feat: record exceptions in http instrumentation (#3008)
• 922e963 fix(sdk-trace-base): fix crash on environments without global document (#3000)
• 0ed21bc fix(grpc-exporter): use non-normalized URL to determine channel security (#3019)
• 1f742e4 fix: remove aws and gcp detector from SDK (#3024)
• 48e960a fix(otlp-transformer): remove type dependency on Long (#3022)
• 9c9789a chore(deps): update dependency protobufjs to v6.11.3 [security] (#3017)
• 51afd54 chore: release proposal 1.3.1/0.29.2 (#3018)
• 094f016 chore: hotfix release 0.29.1 (#3013)
• bf0783a docs: fix experimental example links (#3007)
• d10b254 fix(otlp-transformer): add missing prepublishOnly script (#2998)
• 7649cf1 fix(resources): fix browser compatibility for host and os detectors (#3004)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)