Merge pull request #34926 from overleaf/lg-otel-root-security

[Security upgrade] bump @opentelemetry/core to 2.8.0 (OTEL family)

GitOrigin-RevId: dd45fba9999de03b44ef6bd38ed4dedba0900a50

libraries/metrics/initialize.js

@@ -34,14 +34,15 @@ function initializeOpenTelemetryInstrumentation() {
   const {
     getNodeAutoInstrumentations,
   } = require('@opentelemetry/auto-instrumentations-node')
-  const { Resource } = require('@opentelemetry/resources')
+  const { resourceFromAttributes } = require('@opentelemetry/resources')
   const {
-    SemanticResourceAttributes,
+    ATTR_SERVICE_NAME,
+    ATTR_SERVICE_NAMESPACE,
   } = require('@opentelemetry/semantic-conventions')
 
-  const resource = new Resource({
-    [SemanticResourceAttributes.SERVICE_NAME]: APP_NAME,
-    [SemanticResourceAttributes.SERVICE_NAMESPACE]: 'Overleaf',
+  const resource = resourceFromAttributes({
+    [ATTR_SERVICE_NAME]: APP_NAME,
+    [ATTR_SERVICE_NAMESPACE]: 'Overleaf',
     'host.type': 'VM',
   })
 

libraries/metrics/package.json

@@ -11,10 +11,10 @@
     "@google-cloud/opentelemetry-cloud-trace-exporter": "^3.0.0",
     "@google-cloud/profiler": "^6.0.4",
     "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/auto-instrumentations-node": "^0.76.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
-    "@opentelemetry/resources": "^2.7.1",
-    "@opentelemetry/sdk-node": "^0.218.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.77.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.219.0",
+    "@opentelemetry/resources": "^2.8.0",
+    "@opentelemetry/sdk-node": "^0.219.0",
     "@opentelemetry/semantic-conventions": "^1.41.1",
     "compression": "^1.7.4",
     "prom-client": "^14.1.1",