Skip to content

fix(deps): update newrelic dependencies (major) #8949

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

fix(deps): update newrelic dependencies (major) #8949

wants to merge 2 commits into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 8, 2025

This PR contains the following updates:

Package Change Age Confidence
@envelop/newrelic (source) ^9.0.0 -> ^10.0.0 age confidence
@newrelic/test-utilities 6.5.5 -> 10.0.0 age confidence
newrelic ^7 || ^8.0.0 || ^10.0.0 -> ^7 || ^8.0.0 || ^10.0.0 || ^13.0.0 age confidence
newrelic 10.6.2 -> 13.6.2 age confidence

Release Notes

graphql-hive/envelop (@​envelop/newrelic)

v10.0.0

Compare Source

Patch Changes
newrelic/node-test-utilities (@​newrelic/test-utilities)

v10.0.0

Compare Source

⚠ BREAKING CHANGES
  • Removed Node.js 18 support
Features

v9.2.0

Compare Source

Miscellaneous chores

v9.1.0

Compare Source

Features
  • Added a --matrix-count parameter to versioned tests (#​230) (72d8c7d)

v9.0.0

Compare Source

⚠ BREAKING CHANGES
  • Dropped support for Node.js 16
Features
Code refactoring
  • Reduced dependency on async library (#​219) (582efe6)
  • Removed install queue from versioned runner. It will install before running a given test and rely on the jobs limit (#​221) (d9c6d1b)
Continuous integration

v8.7.0

Compare Source

Features
  • Added support for Node 22
Code refactoring
  • Removed --all flag from versioned runner as all runs will be using this since we no longer support Node.js versions that do not ship with npm7 (#​216) (0db82d8)
Miscellaneous chores
Continuous integration

v8.6.0

Compare Source

Miscellaneous chores
  • Updated mock agent to exclusively rely on InstrumentationTracker (#​203) (0e4d810)

v8.5.0

Compare Source

Features
Continuous integration

v8.4.0

Compare Source

Miscellaneous chores
Continuous integration
  • Updated repo to use conventional commits for releases (#​194) (4254669)

v8.3.0

Compare Source

  • Added new Amazon Titan LLM responses to support token_count work.

v8.2.0

Compare Source

  • Adds a new module that provides a mock server for AWS Bedrock.
  • Bumps follow-redirects from 1.15.3 to 1.15.4.
  • Bumps axios to 1.6.0 and updates ancestor dependency newrelic. These dependencies need to be updated together.
  • Updates axios from 0.21.4 to 1.6.0
  • Updates newrelic from 11.0.0 to 11.5.0
  • Bumps and @​babel/traverse. These dependencies needed to be updated together.
  • Updates @babel/traverse from 7.22.8 to 7.23.2
  • Updates @babel/traverse from 7.21.3 to 7.23.2

v8.1.0

Compare Source

  • Updated the TestAgent to call shimmer.registerHooks and shimmer.removeHooks to set up instrumentation and remove it.

v8.0.0

Compare Source

  • BREAKING CHANGE: Removed support for Node 14.

  • Added support for Node 20.

  • Gated usage of loader in versioned tests by NR_LOADER environment variable

  • Updated vulnerable dependencies:

    • word-wrap from 1.2.3 to 1.2.4.
    • protobufjs from 7.2.2 to 7.2.4.
    • fast-xml-parser from 4.2.4 to 4.2.5
    • @​aws-sdk/client-lambda from 3.357.0 to 3.363.0

v7.3.2

Compare Source

  • Updated semver to 7.5.2

  • Updated newrelic dev dependency to 10.3.0

  • Updated @newrelic/eslint-config to 0.3.0

  • Updated eslint dev dependency to 8.43.0

  • Updated README links to point to new forum link due to repolinter ruleset change

v7.3.1

Compare Source

  • Updated TestAgent.getShim to require an exported module and pull the shim symbol.

v7.3.0

Compare Source

  • Provided ability to register only core instrumentation or both core and 3rd party instrumentation. TestAgent.makeFullyInstrumented will register both. TestAgent.makeInstrumented will only register core instrumentation.

  • Updated README header image to latest OSS office required images

v7.2.1

Compare Source

  • Bumps json5 from 2.2.1 to 2.2.2.
  • Streamlined CLM assertions to inherit tap from context.
  • Bypassed tapper/asserter abstractions so that CLM test failures are exposed.
  • Added lockfile checks to CI workflow to prevent malicious changes

v7.2.0

Compare Source

  • Added assertCLMAttrs testing method to utils, so it can be used to test CLM behavior in external repos

v7.1.1

Compare Source

  • Added detection for node version < 18, to supply correct loader flag

v7.1.0

Compare Source

  • Added the capacity of running ES module tests with the ESM loader from agent or a path to an ESM loader set as process.env.NR_LOADER.

v7.0.0

Compare Source

newrelic/node-newrelic (newrelic)

v13.6.2

Compare Source

Bug fixes
  • Updated express instrumentation to properly instrument an array of middleware defined on a route (#​3473) (e383c4e)
Documentation
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.6.1

Compare Source

v13.6.1 (2025-10-28)

Bug fixes
  • Updated middleware wrapper to not wrap handler if it is not a function (#​3469) (c702689)
Documentation
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.6.0

Compare Source

v13.6.0 (2025-10-27)

Features
Bug fixes
  • Updated ioredis instrumentation to handle breakage of errors when using .pipeline. (#​3457) (49f4d93)
  • Updated openai instrumentStream function to handle empty chunk when include_usage is set (#​3427) (f804940)
Code refactoring
  • Update express instrumentation to subscribe to events emitted (#​3424) (bbf3d01)
  • Updated instances in instrumentation of Array.forEach for a more performant for...of or for index loop (#​3463) (99484ce)
  • Updated instances of Array.forEach for a more performant for...of or for index loop (#​3440) (48c37bf)
  • Updated token calculation for aws-bedrock LLM Events (#​3445) (9450181)
  • Updated token calculation for google-genai LLM Events (#​3431) (41d32be)
  • Updated token calculation for openai LLM Events (#​3430) (b8678cc)
Documentation
Miscellaneous chores
Tests
  • Added a randomString helper to agent_helper and use it in ioredis to avoid flappy tests, also updated local instances of random strings in kafka, elasticsearch and opensearch tests (#​3462) (4deb6d8)
  • Fixed conflict between ioredis and ioredis-esm by running flushdb instead of flushall to avoid index getting removed mid test (#​3464) (5e3f0a8)
  • Fixed express async error test to purposely misspell a method to emit a crash (#​3435) (ff9f064)
  • Moved aws-sdk-v3 common.js requirement of semver (#​3461) (6a380ef)
  • Pinned Next.js tests to <16.0.0 (#​3446) (10787a1)
  • Updated minimum tested version of @langchain/core to 1.0.0 (#​3437) (b61f67a)
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.5.0

Compare Source

v13.5.0 (2025-10-14)

Code refactoring

  • Updated fastify instrumentation to subscribe to events emitted (#​3407) (51e361e)

  • Updated pg and pg-native instrumentation to subscribe to events emitted (#​3397) (04af258)

  • Updated config.instrumentation.timers.enabled to false to disable timers.setTimeout and timers.setInterval by default. (#​3414) (b925d3d)

    • To re-enable, set config.instrumentation.timers.enabled to true in config or set NEW_RELIC_INSTRUMENTATION_TIMERS_ENABLED=true
Documentation
Miscellaneous chores
Styles
  • Require check-types and require-returns-type jsdoc (#​3400) (e4cd687)
  • Require jsdoc check*, implements-on-classes, and some no-undefined-types (#​3404) (4fa645b)
  • Require jsdoc require-returns-check and require-property-* (#​3403) (1008073)
Tests
  • Added helper to get version of package when package.json not exported, and updated tests that need it (#​3411) (5ae02c7)
  • Fixed fastify segment tree assertion when security agent is enabled (#​3422) (b2cf6ed)
  • Refactored mcp tests to listen on new port for every streaming test, removed unncessary shutdown of process (#​3420) (17db813)
  • Updated an openai assertion with setTimeout disabled (#​3421) (ceec8f9)
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.4.0

Compare Source

v13.4.0 (2025-09-29)

Code refactoring
  • Update amqplib instrumentation to subscribe to events emitted (#​3377) (fecbb08)
  • Updated cassandra-driver instrumentation to subscribe to events emitted. (#​3372) (bb87cd8)
Documentation
Miscellaneous chores
  • Updated @apm-js-collab/tracing-hooks to latest to take advantage of wasm optimizations (#​3398) (cda56cc)
Styles
  • Require jsdoc/valid-types and jsdoc/check-param-names (#​3368) (5d1b1d9)
  • Require jsdoc require-param-description and require-param-type (#​3391) (3785d0c)
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.3.3

Compare Source

v13.3.3 (2025-09-22)

Features
Bug fixes
  • Updated openai instrumentation to properly return APIPromise to avoid crashing when using completions.parse or responses.parse (#​3382) (c7ccf26)
Documentation
Miscellaneous chores
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.3.2

Compare Source

v13.3.2 (2025-09-10)

Bug fixes
  • Added defensive code for obtaining protocol in outbound http calls (#​3367) (ecda4e8)
Code refactoring
Documentation
Continuous integration
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.3.1

Compare Source

Bug fixes
  • Default requestParameters to an object to avoid crash in transaction.addRequestParameters (#​3361) (ecd0d1d)
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.3.0

Compare Source

v13.3.0 (2025-09-08)

Features
Code refactoring
  • Removed instances of url.parse. Streamlined how http instrumentation creates relevant attributes. (#​3340) (1fc1e1a)
  • Updated openai instrumentation to subscribe to events emitted (#​3331) (04dd677)
Documentation
Miscellaneous chores
Tests
  • Added more cassandra-driver tests (#​3323) (d2e9d10)
  • Fixed long running benchmark test and add shimmer.subscribers benchmark test (#​3349) (15253c0)
  • Fixed langchain openai streaming tests by explicitly passing streaming: true to chat model (#​3346) (4f12499)
  • Fixed openai test after migration to tracing channel (#​3336) (0d01e29)
  • Hardened batch-span-streamer.test.js to avoid random failures in CI (#​3338) (2077ce3)
Continuous integration
  • Set benchmark host default to staging (#​3332) (55f6b8d)
  • Updated the redis container to use the official redis image as bitnami/redis is moving and no reason to use a 3rd party image (#​3342) (8ffb393)
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.2.1

Compare Source

Code refactoring
  • Updated agent to use @apm-js-collab/tracing-hooks for the CJS/ESM registration for tracing channel based instrumentation (#​3324) (4b2c14f)
Documentation
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.2.0

Compare Source

v13.2.0 (2025-08-20)

Features
  • Added ability to register Supportability/Features/Instrumentation/OnRequire/<pkg> metrics for subscriber based instrumentation (#​3312) (87bfa40)
  • Added esm loader hook and commonjs patch to work with orchestrion-js (#​3312) (415aeba)
  • Added instrumentation for @modelcontextprotocol/sdk client calls client.callTool, client.readResource, and client.getPrompt (#​3312) (5d9790b)
Bug fixes
  • Fixed logic around detecting OTEL packages (#​3326) (4df30e5)
  • Updated shimmer.setupSubscribers to properly setup and skip subscribers that are disabled (#​3312) (cf5b3ec)
Code refactoring
  • Added ability to disable subscribers via config.instrumentation.<pkg-name>.enabled (#​3312) (55f8fe7)
  • Added ability to prevent creation of segments in subscriber based instrumentation when parent is marked as internal and of the same package (#​3322) (91f91c2)
  • Removed id parameter from opensearch class (#​3312) (8be00ce)
  • Updated opensearch instrumentation to subscribe to events emitted (#​3312) (9a27a5d)
  • Updated elasticsearch instrumentation to subscribe to events emitted (#​3312) (a3e2348)
  • Updated ioredis instrumentation to subscribe to events emitted (#​3312) (90b97d2)
  • Updated pino instrumentation to subscribe to events emitted (#​3312) (28bbe9f)
  • Updated subscribers to have a common createSegment that creates, assigns attributes, starts segment (#​3317) (aa3f8d9)
  • Updated undici instrumentation to remove its reliance on shim. Also updated storing the relevant segments on context instead of symbols on the request object (#​3312) (ec17fa7)
Documentation
Miscellaneous chores
Tests
  • Fixed obtaining opensearch package version for older versions we instrument (#​3314) (e45ab27)
  • Removed unnecessary prisma.$use in tests to unpin (#​3303) (db20324)
Continuous integration
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.1.0

Compare Source

v13.1.0 (2025-08-13)

Features
  • Added support for OTEL logs API (#​3228) (19a9c78)
  • Added supportability metrics when instrumentation has been disabled for a package (#​3252) (6098a5b)
  • Disabled timers instrumentation by default in the sample configuration (#​3253) (72eb8d4)
Bug fixes
Code refactoring
Documentation
Miscellaneous chores
Tests
Continuous integration
Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

v13.0.0

Compare Source

v13.0.0 (2025-07-23)

⚠ BREAKING CHANGES

This version of the Node.js agent is a SemVer MAJOR update and contains the following breaking changes. MAJOR versions may drop support for language runtimes that have reached End-of-Life according to the maintainer. Additionally, MAJOR versions may drop support for and remove certain instrumentation. For more details on these changes please see the migration guide.

  • Dropped support for Node.js 18
  • Updated min supported version for fastify to 3.0.0, pino to 8.0.0, and koa-router to 12.0.0
Features
Documentation
Tests

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Nov 8, 2025
@renovate renovate bot requested review from EmrysMyrddin and n1ru4l November 8, 2025 03:30
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 8, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 8, 2025

Apollo Federation Subgraph Compatibility Results

Federation 1 Support Federation 2 Support
_service🟢
@key (single)🟢
@key (multi)🟢
@key (composite)🟢
repeatable @key🟢
@requires🟢
@provides🟢
federated tracing🟢
@link🟢
@shareable🟢
@tag🟢
@override🟢
@inaccessible🟢
@composeDirective🟢
@interfaceObject🟢

Learn more:

@github-actions
Copy link
Contributor

github-actions bot commented Nov 8, 2025

💻 Website Preview

The latest changes are available as preview in: https://ae67379e.graphql-mesh.pages.dev

@renovate
Copy link
Contributor Author

renovate bot commented Nov 8, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@EmrysMyrddin EmrysMyrddin Awaiting requested review from EmrysMyrddin

@n1ru4l n1ru4l Awaiting requested review from n1ru4l

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant