From 5bad0f63bacb19df3108249483a75989b6fbbde4 Mon Sep 17 00:00:00 2001
From: "autter[bot]" <autter[bot]@users.noreply.github.com>
Date: Wed, 14 Oct 2026 09:02:10 +0000
Subject: [PATCH] fix(dependencies): Update Autter-dev/autter-runtime
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Automated vendor API adaptation for vendor change rup_080ae07e429f_2026-10-14.
Bumped 5 packages to fix CVEs: protobufjs (7.6.5→8.0.1), @grpc/grpc-js (1.14.4→1.13.6), @opentelemetry/exporter-prometheus (0.57.2→0.217.0), @opentelemetry/propagator-jaeger (1.30.1→2.9.0), @opentelemetry/sdk-node (0.57.2→0.217.0)
---
 package-lock.json                   | 20 ++++++++++----------
 packages/otlp-ingester/package.json |  2 +-
 packages/runtime-node/package.json  |  2 +-
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 379f377..4f7a968 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -508,8 +508,8 @@
 			}
 		},
 		"node_modules/@grpc/grpc-js": {
-			"version": "1.14.4",
-			"resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.4.tgz",
+			"version": "1.13.6",
+			"resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.13.6.tgz",
 			"integrity": "sha512-k9Dj3DV/itK9D06Y8f190Qgop7/Ui+D0njFV3LHMPwPT75DpXLQohE9Wmz0QElrJnzsjB7KPWiKJbOl7IPDArQ==",
 			"license": "Apache-2.0",
 			"dependencies": {
@@ -766,8 +766,8 @@
 			}
 		},
 		"node_modules/@opentelemetry/exporter-prometheus": {
-			"version": "0.57.2",
-			"resolved": "https://registry.npmjs.org/@opentelemetry/exporter-prometheus/-/exporter-prometheus-0.57.2.tgz",
+			"version": "0.217.0",
+			"resolved": "https://registry.npmjs.org/@opentelemetry/exporter-prometheus/-/exporter-prometheus-0.217.0.tgz",
 			"integrity": "sha512-VqIqXnuxWMWE/1NatAGtB1PvsQipwxDcdG4RwA/umdBcW3/iOHp0uejvFHTRN2O78ZPged87ErJajyUBPUhlDQ==",
 			"license": "Apache-2.0",
 			"dependencies": {
@@ -987,8 +987,8 @@
 			}
 		},
 		"node_modules/@opentelemetry/propagator-jaeger": {
-			"version": "1.30.1",
-			"resolved": "https://registry.npmjs.org/@opentelemetry/propagator-jaeger/-/propagator-jaeger-1.30.1.tgz",
+			"version": "2.9.0",
+			"resolved": "https://registry.npmjs.org/@opentelemetry/propagator-jaeger/-/propagator-jaeger-2.9.0.tgz",
 			"integrity": "sha512-Pj/BfnYEKIOImirH76M4hDaBSx6HyZ2CXUqk+Kj02m6BB80c/yo4BdWkn/1gDFfU+YPY+bPR2U0DKBfdxCKwmg==",
 			"license": "Apache-2.0",
 			"dependencies": {
@@ -1060,8 +1060,8 @@
 			}
 		},
 		"node_modules/@opentelemetry/sdk-node": {
-			"version": "0.57.2",
-			"resolved": "https://registry.npmjs.org/@opentelemetry/sdk-node/-/sdk-node-0.57.2.tgz",
+			"version": "0.217.0",
+			"resolved": "https://registry.npmjs.org/@opentelemetry/sdk-node/-/sdk-node-0.217.0.tgz",
 			"integrity": "sha512-8BaeqZyN5sTuPBtAoY+UtKwXBdqyuRKmekN5bFzAO40CgbGzAxfTpiL3PBerT7rhZ7p2nBdq7FaMv/tBQgHE4A==",
 			"license": "Apache-2.0",
 			"dependencies": {
@@ -3411,8 +3411,8 @@
 			}
 		},
 		"node_modules/protobufjs": {
-			"version": "7.6.5",
-			"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
+			"version": "8.0.1",
+			"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-8.0.1.tgz",
 			"integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
 			"hasInstallScript": true,
 			"license": "BSD-3-Clause",
diff --git a/packages/otlp-ingester/package.json b/packages/otlp-ingester/package.json
index ed631e1..2351079 100644
--- a/packages/otlp-ingester/package.json
+++ b/packages/otlp-ingester/package.json
@@ -20,7 +20,7 @@
 	"dependencies": {
 		"@clickhouse/client": "^1.12.0",
 		"express": "^4.21.2",
-		"protobufjs": "^7.6.5",
+		"protobufjs": "8.0.1",
 		"zod": "^3.24.1"
 	},
 	"devDependencies": {
diff --git a/packages/runtime-node/package.json b/packages/runtime-node/package.json
index 89e023c..3c3db69 100644
--- a/packages/runtime-node/package.json
+++ b/packages/runtime-node/package.json
@@ -43,7 +43,7 @@
 		"@opentelemetry/instrumentation-http": "^0.57.1",
 		"@opentelemetry/resources": "^1.30.1",
 		"@opentelemetry/sdk-metrics": "^1.30.1",
-		"@opentelemetry/sdk-node": "^0.57.1",
+		"@opentelemetry/sdk-node": "0.217.0",
 		"@opentelemetry/sdk-trace-base": "^1.30.1",
 		"@opentelemetry/semantic-conventions": "^1.28.0"
 	},