hyperdxio · kodiakhq · May 26, 2026 · May 22, 2026
diff --git a/.changeset/remove-babel-runtime-phantom-dep.md b/.changeset/remove-babel-runtime-phantom-dep.md
diff --git a/.changeset/upgrade-otel-v2.md b/.changeset/upgrade-otel-v2.md
diff --git a/packages/browser/CHANGELOG.md b/packages/browser/CHANGELOG.md
@@ -1,5 +1,27 @@
 # @hyperdx/browser
 
+## 0.24.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
+### Patch Changes
+
+- df0ca02: Move `@babel/runtime` from runtime dependencies to devDependencies. The
+  published CommonJS and ESM output (`dist/cjs/`, `dist/esm/`) is produced by
+  `tsc` and does not reference `@babel/runtime` at all; only the unpublished
+  Rollup IIFE bundle needed it. Keeping it as a runtime dependency forced
+  consumers to install a vulnerable version of `@babel/runtime` (<7.26.10,
+  GHSA-968p-4wvh-cqc8), surfacing as a moderate-severity finding in
+  `npm audit`. With this change, a clean install of `@hyperdx/browser`,
+  `@hyperdx/otel-web`, or `@hyperdx/otel-web-session-recorder` no longer
+  pulls in the vulnerable `@babel/runtime` and `npm audit` is clean.
+- Updated dependencies [df0ca02]
+- Updated dependencies [aedb9ea]
+  - @hyperdx/otel-web-session-recorder@2.0.0
+  - @hyperdx/otel-web@0.18.0
+
 ## 0.23.1
 
 ### Patch Changes

diff --git a/packages/browser/package.json b/packages/browser/package.json
@@ -1,12 +1,12 @@
 {
   "name": "@hyperdx/browser",
-  "version": "0.23.1",
+  "version": "0.24.0",
   "license": "Apache-2.0",
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "dependencies": {
-    "@hyperdx/otel-web": "0.17.1",
-    "@hyperdx/otel-web-session-recorder": "1.0.1"
+    "@hyperdx/otel-web": "0.18.0",
+    "@hyperdx/otel-web-session-recorder": "2.0.0"
   },
   "devDependencies": {
     "@rollup/plugin-commonjs": "^24.1.0",

diff --git a/packages/instrumentation-exception/CHANGELOG.md b/packages/instrumentation-exception/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @hyperdx/instrumentation-exception
 
+## 0.3.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
+### Patch Changes
+
+- Updated dependencies [aedb9ea]
+  - @hyperdx/instrumentation-sentry-node@0.2.0
+
 ## 0.2.0
 
 ### Minor Changes

diff --git a/packages/instrumentation-exception/package.json b/packages/instrumentation-exception/package.json
@@ -2,7 +2,7 @@
   "name": "@hyperdx/instrumentation-exception",
   "author": "Warren <warren@users.noreply.github.com>",
   "license": "Apache-2.0",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "homepage": "https://www.hyperdx.io",
   "repository": {
     "type": "git",
@@ -32,7 +32,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@hyperdx/instrumentation-sentry-node": "^0.1.0",
+    "@hyperdx/instrumentation-sentry-node": "^0.2.0",
     "@opentelemetry/core": "^2.7.1",
     "@opentelemetry/instrumentation": "^0.218.0",
     "@opentelemetry/semantic-conventions": "^1.41.1",

diff --git a/packages/instrumentation-sentry-node/CHANGELOG.md b/packages/instrumentation-sentry-node/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @hyperdx/instrumentation-sentry-node
 
+## 0.2.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/instrumentation-sentry-node/package.json b/packages/instrumentation-sentry-node/package.json
@@ -2,7 +2,7 @@
   "name": "@hyperdx/instrumentation-sentry-node",
   "author": "Warren <warren@users.noreply.github.com>",
   "license": "Apache-2.0",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "homepage": "https://www.hyperdx.io",
   "repository": {
     "type": "git",

diff --git a/packages/node-logger/CHANGELOG.md b/packages/node-logger/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @hyperdx/node-logger
 
+## 0.5.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
 ## 0.4.0
 
 ### Minor Changes

diff --git a/packages/node-logger/package.json b/packages/node-logger/package.json
@@ -2,7 +2,7 @@
   "name": "@hyperdx/node-logger",
   "author": "Warren <warren@users.noreply.github.com>",
   "license": "MIT",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "",
   "homepage": "https://www.hyperdx.io",
   "repository": {

diff --git a/packages/node-opentelemetry/CHANGELOG.md b/packages/node-opentelemetry/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @hyperdx/node-opentelemetry
 
+## 0.11.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
+### Patch Changes
+
+- Updated dependencies [aedb9ea]
+  - @hyperdx/instrumentation-exception@0.3.0
+  - @hyperdx/instrumentation-sentry-node@0.2.0
+
 ## 0.10.5
 
 ### Patch Changes

diff --git a/packages/node-opentelemetry/package.json b/packages/node-opentelemetry/package.json
@@ -2,7 +2,7 @@
   "name": "@hyperdx/node-opentelemetry",
   "author": "Warren <warren@users.noreply.github.com>",
   "license": "MIT",
-  "version": "0.10.5",
+  "version": "0.11.0",
   "homepage": "https://www.hyperdx.io",
   "repository": {
     "type": "git",
@@ -35,8 +35,8 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@hyperdx/instrumentation-exception": "^0.2.0",
-    "@hyperdx/instrumentation-sentry-node": "^0.1.0",
+    "@hyperdx/instrumentation-exception": "^0.3.0",
+    "@hyperdx/instrumentation-sentry-node": "^0.2.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "^0.218.0",
     "@opentelemetry/auto-instrumentations-node": "^0.76.0",

diff --git a/packages/otel-web/CHANGELOG.md b/packages/otel-web/CHANGELOG.md
@@ -1,5 +1,25 @@
 # @hyperdx/otel-web
 
+## 0.18.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
+### Patch Changes
+
+- df0ca02: Move `@babel/runtime` from runtime dependencies to devDependencies. The
+  published CommonJS and ESM output (`dist/cjs/`, `dist/esm/`) is produced by
+  `tsc` and does not reference `@babel/runtime` at all; only the unpublished
+  Rollup IIFE bundle needed it. Keeping it as a runtime dependency forced
+  consumers to install a vulnerable version of `@babel/runtime` (<7.26.10,
+  GHSA-968p-4wvh-cqc8), surfacing as a moderate-severity finding in
+  `npm audit`. With this change, a clean install of `@hyperdx/browser`,
+  `@hyperdx/otel-web`, or `@hyperdx/otel-web-session-recorder` no longer
+  pulls in the vulnerable `@babel/runtime` and `npm audit` is clean.
+- Updated dependencies [aedb9ea]
+  - @hyperdx/instrumentation-exception@0.3.0
+
 ## 0.17.1
 
 ### Patch Changes

diff --git a/packages/otel-web/package.json b/packages/otel-web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperdx/otel-web",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "description": "HyperDX distribution of OpenTelemetry for real user monitoring (RUM)",
   "scripts": {
     "start": "npm-run-all -s compile start:_execute",
@@ -48,7 +48,7 @@
     "dist/esm/*.d.ts"
   ],
   "dependencies": {
-    "@hyperdx/instrumentation-exception": "^0.2.0",
+    "@hyperdx/instrumentation-exception": "^0.3.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/core": "^2.7.1",
     "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",

diff --git a/packages/otel-web/src/version.ts b/packages/otel-web/src/version.ts
@@ -1,2 +1,2 @@
 // this is an autogenerated file, see scripts/version-update.js
-export const VERSION = '0.17.1';
+export const VERSION = '0.18.0';
diff --git a/packages/session-recorder/CHANGELOG.md b/packages/session-recorder/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @hyperdx/otel-web-session-recorder
 
+## 2.0.0
+
+### Minor Changes
+
+- aedb9ea: Upgrade all OpenTelemetry dependencies to latest versions (core/resources/sdk-trace-base/sdk-metrics to ^2.7.1, semantic-conventions to ^1.41.1, api to ^1.9.1). Migrates to v2 APIs: `resourceFromAttributes()` replaces `new Resource()`, updated semantic convention constants, updated resource detectors, and span processors passed via constructor options.
+
+### Patch Changes
+
+- df0ca02: Move `@babel/runtime` from runtime dependencies to devDependencies. The
+  published CommonJS and ESM output (`dist/cjs/`, `dist/esm/`) is produced by
+  `tsc` and does not reference `@babel/runtime` at all; only the unpublished
+  Rollup IIFE bundle needed it. Keeping it as a runtime dependency forced
+  consumers to install a vulnerable version of `@babel/runtime` (<7.26.10,
+  GHSA-968p-4wvh-cqc8), surfacing as a moderate-severity finding in
+  `npm audit`. With this change, a clean install of `@hyperdx/browser`,
+  `@hyperdx/otel-web`, or `@hyperdx/otel-web-session-recorder` no longer
+  pulls in the vulnerable `@babel/runtime` and `npm audit` is clean.
+- Updated dependencies [df0ca02]
+- Updated dependencies [aedb9ea]
+  - @hyperdx/otel-web@0.18.0
+
 ## 1.0.1
 
 ### Patch Changes

diff --git a/packages/session-recorder/package.json b/packages/session-recorder/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperdx/otel-web-session-recorder",
-  "version": "1.0.1",
+  "version": "2.0.0",
   "description": "HyperDX distribution OpenTelemetry-based session recording",
   "scripts": {
     "prebuild": "npm run postversion",
@@ -44,7 +44,7 @@
     "type-fest": "4.20.1"
   },
   "peerDependencies": {
-    "@hyperdx/otel-web": "^0.17.1"
+    "@hyperdx/otel-web": "^0.18.0"
   },
   "devDependencies": {
     "@babel/plugin-transform-runtime": "^7.19.1",

diff --git a/packages/session-recorder/src/version.ts b/packages/session-recorder/src/version.ts
@@ -1,2 +1,2 @@
 // this is an autogenerated file, see scripts/version-update.js
-export const VERSION = '1.0.1';
+export const VERSION = '2.0.0';