fix: CVE-2023-38704 (#242)

Note: Patch release will follow today as well.
grafana · Aug 14, 2023 · abc70a5 · abc70a5
1 parent 8928dc3
commit abc70a5
Show file tree

Hide file tree

Showing 2 changed files with 191 additions and 61 deletions.
diff --git a/packages/web-tracing/package.json b/packages/web-tracing/package.json
@@ -54,18 +54,18 @@
   "dependencies": {
     "@grafana/faro-web-sdk": "^1.1.2",
     "@opentelemetry/api": "^1.4.1",
-    "@opentelemetry/context-zone": "^1.11.0",
-    "@opentelemetry/core": "^1.11.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.37.0",
-    "@opentelemetry/instrumentation": "^0.37.0",
-    "@opentelemetry/instrumentation-document-load": "^0.32.0",
-    "@opentelemetry/instrumentation-fetch": "^0.37.0",
-    "@opentelemetry/instrumentation-xml-http-request": "^0.37.0",
-    "@opentelemetry/otlp-transformer": "^0.37.0",
-    "@opentelemetry/resources": "^1.11.0",
-    "@opentelemetry/sdk-trace-base": "^1.11.0",
-    "@opentelemetry/sdk-trace-web": "^1.11.0",
-    "@opentelemetry/semantic-conventions": "^1.11.0"
+    "@opentelemetry/context-zone": "^1.15.2",
+    "@opentelemetry/core": "^1.15.2",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.41.2",
+    "@opentelemetry/instrumentation": "^0.41.2",
+    "@opentelemetry/instrumentation-document-load": "^0.33.0",
+    "@opentelemetry/instrumentation-fetch": "^0.41.2",
+    "@opentelemetry/instrumentation-xml-http-request": "^0.41.2",
+    "@opentelemetry/otlp-transformer": "^0.41.2",
+    "@opentelemetry/resources": "^1.15.2",
+    "@opentelemetry/sdk-trace-base": "^1.15.2",
+    "@opentelemetry/sdk-trace-web": "^1.15.2",
+    "@opentelemetry/semantic-conventions": "^1.15.2"
   },
   "resolutions": {
     "@opentelemetry/api-metrics": "^0.29.1"