chore(deps): snyk dependency upgrade

[snyk-io]

🛡️ Snyk Security Upgrade

This automated PR fixes security vulnerabilities found in @opentelemetry/semantic-conventions.

📋 Changes

• Package: @opentelemetry/semantic-conventions
• Upgrade: 1.40.0 → 1.42.0
• Issues fixed: 0

Security Review

• [] I have considered and reviewed security implications of this PR and included the summary below.

Security Impact Summary

The purpose of this PR is to update a dependency which meets the criteria set in snyk.

⚙️ Settings

[snyk-io]

This upgrade contains breaking changes if you use the incubating entry point, particularly for Generative AI conventions. The risk is low if you only use the stable entry point.

Key Changes

• Stable Conventions (@opentelemetry/semantic-conventions): This part of the library only received additive changes (46 new exports). There are no breaking changes for the stable conventions.
• Incubating Conventions (@opentelemetry/semantic-conventions/incubating): This entry point has significant breaking changes.
  • Breaking Change: A large number of Generative AI (gen_ai.*) attributes and metrics have been deprecated and moved to a separate repository. These will eventually be published in a new @opentelemetry/semantic-conventions-genai package.

Assessment

• Low Risk: If your application only imports from the stable @opentelemetry/semantic-conventions, this upgrade is safe.
• High Risk: If your application imports from @opentelemetry/semantic-conventions/incubating and uses GenAI conventions, you will need to update your code once the new package is available or pin your dependency to avoid breakage.

Recommendation:
Verify if your project uses conventions from the incubating entry point. If so, review the release notes carefully to understand the impact of the deprecated GenAI conventions. The incubating entry-point is not subject to semantic versioning and may contain breaking changes in any minor release.

Source: Release notes for v1.42.0

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.