Skip to content

chore(deps): bump @opentelemetry/instrumentation-mongoose to >=0.67.0 - #21403

Open
mozilla-blender[bot] wants to merge 1 commit into
mainfrom
blender/security-bump-@opentelemetry/instrumentation-mongoose
Open

mozilla-blender[bot] wants to merge 1 commit into
mainfrom
blender/security-bump-@opentelemetry/instrumentation-mongoose

Conversation

@mozilla-blender

Copy link
Copy Markdown
Contributor

Summary

Resolves a flagged transitive dependency advisory.

This is a transitive dependency update. Only yarn.lock (and possibly package.json) changed.


Created by BLEnder investigation via BLEnder

@mozilla-blender

Copy link
Copy Markdown
Contributor Author

BLEnder could not fix this PR automatically. Workflow run

@toufali
toufali force-pushed the blender/security-bump-@opentelemetry/instrumentation-mongoose branch from c519c01 to 9b321ea Compare October 7, 2026 20:15
@vbudhram
vbudhram force-pushed the blender/security-bump-@opentelemetry/instrumentation-mongoose branch 2 times, most recently from 0e42635 to 64b8a0e Compare October 13, 2026 20:06
Resolves Dependabot alert #997. The bump installs the highest
version satisfying the dependency range; the title uses >=<min> when the
advisory provides a minimum patched version — see the lockfile diff for the exact resolved version.
Created by BLEnder (https://github.com/mozilla/blender)
@vbudhram
vbudhram force-pushed the blender/security-bump-@opentelemetry/instrumentation-mongoose branch from 64b8a0e to 863fffb Compare October 13, 2026 20:27

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants