From c8af8dccd582864e07329581c1a8ba4d5c8762ff Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 21 Feb 2023 07:32:36 +0000
Subject: [PATCH] fix: upgrade @opentelemetry/instrumentation from 0.34.0 to
 0.35.1

Snyk has created this PR to upgrade @opentelemetry/instrumentation from 0.34.0 to 0.35.1.

See this package in npm:
https://www.npmjs.com/package/@opentelemetry/instrumentation

See this project in Snyk:
https://app.snyk.io/org/nodeshift-starters/project/5522f031-6c7b-4ab5-a740-ef10a9d036a7?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 frontend/package-lock.json | 44 +++++++++++++++++++++++++++++++-------
 frontend/package.json      |  2 +-
 2 files changed, 37 insertions(+), 9 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 7ca0d46..ef61ac8 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "@opentelemetry/api": "^1.3.0",
         "@opentelemetry/exporter-jaeger": "^1.8.0",
-        "@opentelemetry/instrumentation": "^0.34.0",
+        "@opentelemetry/instrumentation": "^0.35.1",
         "@opentelemetry/instrumentation-express": "^0.31.3",
         "@opentelemetry/instrumentation-http": "^0.34.0",
         "@opentelemetry/resources": "^1.8.0",
@@ -19,7 +19,7 @@
         "@opentelemetry/sdk-trace-node": "^1.8.0",
         "@opentelemetry/semantic-conventions": "^1.8.0",
         "body-parser": "~1.20.0",
-        "express": "^4.18.2",
+        "express": "~4.18.2",
         "kube-service-bindings": "^1.0.0",
         "pino": "^8.4.2",
         "rhea": "^3.0.1"
@@ -231,9 +231,9 @@
       }
     },
     "node_modules/@opentelemetry/instrumentation": {
-      "version": "0.34.0",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.34.0.tgz",
-      "integrity": "sha512-VET/bOh4StOQV4vf1sAvn2JD67BhW2vPZ/ynl2gHXyafme2yB8Hs9+tr1TLzFwNGo7jwMFviFQkZjCYxMuK0AA==",
+      "version": "0.35.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.35.1.tgz",
+      "integrity": "sha512-EZsvXqxenbRTSNsft6LDcrT4pjAiyZOx3rkDNeqKpwZZe6GmZtsXaZZKuDkJtz9fTjOGjDHjZj9/h80Ya9iIJw==",
       "dependencies": {
         "require-in-the-middle": "^5.0.3",
         "semver": "^7.3.2",
@@ -308,6 +308,22 @@
         "@opentelemetry/api": "^1.3.0"
       }
     },
+    "node_modules/@opentelemetry/instrumentation-http/node_modules/@opentelemetry/instrumentation": {
+      "version": "0.34.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.34.0.tgz",
+      "integrity": "sha512-VET/bOh4StOQV4vf1sAvn2JD67BhW2vPZ/ynl2gHXyafme2yB8Hs9+tr1TLzFwNGo7jwMFviFQkZjCYxMuK0AA==",
+      "dependencies": {
+        "require-in-the-middle": "^5.0.3",
+        "semver": "^7.3.2",
+        "shimmer": "^1.2.1"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
     "node_modules/@opentelemetry/propagator-b3": {
       "version": "1.8.0",
       "resolved": "https://registry.npmjs.org/@opentelemetry/propagator-b3/-/propagator-b3-1.8.0.tgz",
@@ -5232,9 +5248,9 @@
       }
     },
     "@opentelemetry/instrumentation": {
-      "version": "0.34.0",
-      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.34.0.tgz",
-      "integrity": "sha512-VET/bOh4StOQV4vf1sAvn2JD67BhW2vPZ/ynl2gHXyafme2yB8Hs9+tr1TLzFwNGo7jwMFviFQkZjCYxMuK0AA==",
+      "version": "0.35.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.35.1.tgz",
+      "integrity": "sha512-EZsvXqxenbRTSNsft6LDcrT4pjAiyZOx3rkDNeqKpwZZe6GmZtsXaZZKuDkJtz9fTjOGjDHjZj9/h80Ya9iIJw==",
       "requires": {
         "require-in-the-middle": "^5.0.3",
         "semver": "^7.3.2",
@@ -5282,6 +5298,18 @@
         "@opentelemetry/instrumentation": "0.34.0",
         "@opentelemetry/semantic-conventions": "1.8.0",
         "semver": "^7.3.5"
+      },
+      "dependencies": {
+        "@opentelemetry/instrumentation": {
+          "version": "0.34.0",
+          "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.34.0.tgz",
+          "integrity": "sha512-VET/bOh4StOQV4vf1sAvn2JD67BhW2vPZ/ynl2gHXyafme2yB8Hs9+tr1TLzFwNGo7jwMFviFQkZjCYxMuK0AA==",
+          "requires": {
+            "require-in-the-middle": "^5.0.3",
+            "semver": "^7.3.2",
+            "shimmer": "^1.2.1"
+          }
+        }
       }
     },
     "@opentelemetry/propagator-b3": {
diff --git a/frontend/package.json b/frontend/package.json
index 2a7dccd..fca8077 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -31,7 +31,7 @@
   "dependencies": {
     "@opentelemetry/api": "^1.3.0",
     "@opentelemetry/exporter-jaeger": "^1.8.0",
-    "@opentelemetry/instrumentation": "^0.34.0",
+    "@opentelemetry/instrumentation": "^0.35.1",
     "@opentelemetry/instrumentation-express": "^0.31.3",
     "@opentelemetry/instrumentation-http": "^0.34.0",
     "@opentelemetry/resources": "^1.8.0",