ITADN

[bug] @arizeai/openinference-core should support @opentelemetry/core@2.8.0, as previous versions have a vulnerability.

#3289ClosedRaphaelMelanconAtBentley 创建于 2026-06-25
buglanguage: jstriage
**Describe the bug** @opentelemetry/core has this security issue that is only patched in versions 2.8.0 and above, but the @arizeai/openinference-core package only supports @opentelemetry/core version 1. See https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-8988-4f7v-96qf
关闭于 2026-07-02 3 条评论