chore: version packages (rc)

[connectum-release-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

main is currently in pre mode so this branch has prereleases rather than normal releases. If you want to exit prereleases, run changeset pre exit on main.

⚠️⚠️⚠️⚠️⚠️⚠️

Releases

@connectum/auth@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/events@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/events-amqp@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/events@1.0.0-rc.11

@connectum/events-kafka@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/events@1.0.0-rc.11

@connectum/events-nats@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/events@1.0.0-rc.11

@connectum/events-redis@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/events@1.0.0-rc.11

@connectum/healthcheck@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/interceptors@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/otel@1.0.0-rc.11

Patch Changes

• #98 15f4dbb Thanks @intech! - Bump OpenTelemetry SDK to 0.215.0 / v2.7.0 and semantic conventions to 1.40.0.

  Highlights (auto-gain, no API changes in @connectum/otel):

  • Hand-rolled ProtobufLogsSerializer (PR feat(otlp-transformer): add custom logs protobuf serializer open-telemetry/opentelemetry-js#6390, v0.215.0) — +67–73% throughput for typical batch sizes (100–1024 logs); +72% at 512 logs, +67% at 1024 logs per upstream benchmarks in PR #6228
  • cardinalitySelector support in PeriodicExportingMetricReader (PR #6460, v2.7.0) — protection against cardinality explosion on high-variance attributes
  • SDK self-observability: span + log creation metrics (PRs #6213, #6433)
  • Internal mergeTwoObjects safety checks (PR #6587, v2.7.0) — additional guards against unsafe key merges
  • Updated semantic conventions (semconv v1.40.0) — stable RPC attributes including rpc.response.status_code and error.type (stabilized in semconv v1.39.0)

  Breaking changes upstream that do NOT affect @connectum/otel (verified):

  • Custom LogRecordExporter.forceFlush() requirement — not applicable (we use stock exporters only)
  • gRPC exporter config headers field removal — not applicable (CollectorOptions has no headers)

• #99 5b3f01d Thanks @intech! - security(deps): force patched versions of protobufjs and basic-ftp via pnpm overrides

  Resolves Dependabot alerts on main branch:

  • GHSA-xq3m-2v4x-88gg (Critical) — Arbitrary code execution in protobufjs < 7.5.5
    (transitive via @grpc/proto-loader under OTel gRPC exporters).
  • GHSA-xq3m-2v4x-88gg (Critical) — Arbitrary code execution in protobufjs 8.0.0
    (transitive via @opentelemetry/otlp-transformer).
  • GHSA-chqc-8p9q-pq6q (High) — basic-ftp 5.2.0 FTP Command Injection via CRLF
    (dev-only transitive via @exodus/test → puppeteer-core).
  • GHSA-6v7q-wjvx-w8wg (High) — basic-ftp ≤ 5.2.1 incomplete CRLF protection
    (dev-only transitive via @exodus/test → puppeteer-core).

  No runtime API changes. Only pnpm.overrides in the monorepo root were adjusted
  to force patched transitive versions: protobufjs@<7.5.5 → 7.5.5,
  protobufjs@>=8.0.0 <8.0.1 → 8.0.1, basic-ftp@<5.2.2 → 5.2.2.

@connectum/reflection@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/testing@1.0.0-rc.11

Patch Changes

• Updated dependencies []:
  • @connectum/core@1.0.0-rc.11

@connectum/cli@1.0.0-rc.11

@connectum/core@1.0.0-rc.11

[pkg-pr-new]

Open in StackBlitz

@connectum/auth

npm i https://pkg.pr.new/@connectum/auth@100

@connectum/cli

npm i https://pkg.pr.new/@connectum/cli@100

@connectum/core

npm i https://pkg.pr.new/@connectum/core@100

@connectum/events

npm i https://pkg.pr.new/@connectum/events@100

@connectum/events-amqp

npm i https://pkg.pr.new/@connectum/events-amqp@100

@connectum/events-kafka

npm i https://pkg.pr.new/@connectum/events-kafka@100

@connectum/events-nats

npm i https://pkg.pr.new/@connectum/events-nats@100

@connectum/events-redis

npm i https://pkg.pr.new/@connectum/events-redis@100

@connectum/healthcheck

npm i https://pkg.pr.new/@connectum/healthcheck@100

@connectum/interceptors

npm i https://pkg.pr.new/@connectum/interceptors@100

@connectum/otel

npm i https://pkg.pr.new/@connectum/otel@100

@connectum/reflection

npm i https://pkg.pr.new/@connectum/reflection@100

@connectum/testing

npm i https://pkg.pr.new/@connectum/testing@100

commit: 8d4a06a