[bug] @arizeai/openinference-core should support @opentelemetry/core@2.8.0, as previous versions have a vulnerability.
buglanguage: jstriage
**Describe the bug**
@opentelemetry/core has this security issue that is only patched in versions 2.8.0 and above, but the @arizeai/openinference-core package only supports @opentelemetry/core version 1.
See https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-8988-4f7v-96qf
关闭于 2026-07-02 3 条评论