Update @opentelemetry/instrumentation to resolve outdated cjs-module-lexer transitive dependency

[weiweiweizhu]

Description

The current version of @cap-js/telemetry (v1.6.0) depends on @opentelemetry/instrumentation@0.57.2, which has a transitive dependency on cjs-module-lexer@1.4.3. This outdated version of cjs-module-lexer causes compliance issues in our project.

Current Situation

• @cap-js/telemetry@1.6.0 → @opentelemetry/instrumentation@0.57.2 → cjs-module-lexer@1.4.3

Request

Could you please update the dependency on @opentelemetry/instrumentation to a version that includes cjs-module-lexer > 1.4.3? This would eliminate the need for package manager overrides and ensure compliance with security requirements.

[weiweiweizhu]

Hi @sjvans,

Could you have a look of this update of library?

Best regards,

[sjvans]

hi @weiweiweizhu

sorry, nothing we can do. 0.57.2 is the latest otel 1.0 version of @opentelemetry/instrumentation. otel 2.0 is not yet supported. you'd need to reach out to the @opentelemetry/instrumentation maintainers.

best,
sebastian