DeprecationWarning: Buffer

[imgalli]

Hi! We're seeing this error in the log that we're tracking back to protobuf.js, which is in turn a dep of dd-trace. Your module is the only reason for this dep to be included, is there a way you can upgrade or mitigate?

(node:7) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.

[ofhouse]

We saw a similar message this morning, but tracked it back to the use of msgpack-lite (which is a direct dependency of dd-trace).

X-Ref: kawanet/msgpack-lite#98

[opeologist]

any update on this ?

[juancarlosjr97]

Any update on this?

[ghost]

Given that the library was last updated 7 years ago and this issue still remains, it may be worth considering a different msgpack library

[yelsayed]

Keeping this thread alive.

[Que3216]

Just wanted to check in -- is there any update on this? (looks like it's been open for 6 months now, and presumably is affecting every customer using dd-trace on modern Node?)

[Que3216]

Looks like there is a fork that may fix this meetnow/msgpack-long-lite@b7a4252 ? (but haven't investigated closely)

[kasleet]

Any timeline on this?

[juancarlosjr97]

:(...

[ahmadnassri]

so maybe we'll see this fixed in 2027???

[JstnMcBrd]

Corresponding issue in msgpack-lite

• [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead. kawanet/msgpack-lite#98