chore(deps): minimatch (patch → 10.2.6) [integration-tests/package.json] by gh-worker-campaigns-3e9aa4[bot] · Pull Request #1487 · DataDog/datadog-lambda-extension

gh-worker-campaigns-3e9aa4 · 2026-11-02T09:52:49Z

Warning

Shotclock auto-merge countdown

This PR may be automatically approved and merged on or after November 12, 2026 (UTC) if nobody acts and all required Shotclock eligibility checks pass.

To stop Shotclock, comment on this PR, request changes, push a commit, or close the PR. Converting it to draft pauses automation.

Summary: Dependency update — 1 package upgraded (patch changes only)

Manifests changed:

integration-tests/package.json (npm)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
minimatch	10.2.5	10.2.6	patch	Transitive	-

Review Checklist

Standard review:

Review changes for compatibility with your code
Check for breaking changes in release notes
Run tests locally or wait for CI
Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

datadog-datadog-prod-us1-2 · 2026-11-02T10:05:59Z

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 2 Pipeline jobs failed

DDCI - DataDog/datadog-lambda-extension | e2e-test-status (amd64)

View more details · View in DDCI

DataDog/datadog-lambda-extension | e2e-test-status (amd64)

View more details · View in GitLab

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 034b763 | Docs | View more details | Give us feedback!}

gh-worker-campaigns-3e9aa4 · 2026-11-04T16:00:22Z

Auto-rebase complete

Branch is up to date with main — rebased onto 9cbc6d9.

_{Auto-Rebase · Add no-auto-rebase to opt out}

chatgpt-codex-connector · 2026-11-05T18:09:06Z

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-12T21:08:19.163440Z	`034b763`	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

dd-prapprover-prod-77c48c · 2026-11-05T18:10:11Z

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-11-12T21:07:20Z
✅ CI tests passed - 2026-11-12T21:07:27Z
✅ Approved (commit: 034b763) - 2026-11-12T21:07:33Z
⬜ Merge Started
⬜ Merged

➡️ Current phase: waiting to merge...

Copilot

🟡 Changes recommended

The lockfile still records the bundled minimatch dependency at 10.2.5 with no 10.2.6 entry, leaving the intended dependency update unapplied while unrelated packages change.

1 open issue

Bundled minimatch remains at 10.2.5 · New

1 file not reviewed

integration-tests/package-lock.json: Generated file

What changed in this PR

This PR refreshes dependencies for the Lambda extension’s integration tests. Although titled as a minimatch patch update, the diff changes dependency overrides and other locked packages.

Changes:

Removes several OpenTelemetry, AWS SDK, and CDK overrides and adds an XML parser override under @aws-sdk/xml-builder.
Updates XML-related dependencies and several other transitive packages.
Consolidates OpenTelemetry semantic conventions entries at version 1.28.0.

File	Description
`integration-tests/package.json`	Revises transitive dependency overrides.
`integration-tests/package-lock.json`	Refreshes dependency versions and consolidates OpenTelemetry entries.

_{Review effort: Balanced}

+    "@aws-sdk/xml-builder": {
+      "fast-xml-parser": "^5.8.0"


chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 89cc865d1d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-11-05T18:11:53Z

+    "@aws-sdk/xml-builder": {
+      "fast-xml-parser": "^5.8.0"
    }


Resolve the advertised minimatch 10.2.6 update

This manifest rewrite does not perform the stated dependency update: the resulting integration-tests/package-lock.json still records the bundled aws-cdk-lib/node_modules/minimatch as 10.2.5 at lines 2587–2592, exactly as in the parent, so npm ci continues installing 10.2.5. Regenerate the dependency tree so it actually resolves 10.2.6—likely through an aws-cdk-lib release that bundles it—and update the summary to describe the unrelated override and transitive-package changes accurately.

AGENTS.md reference: AGENTS.md:L30-L31

Useful? React with 👍 / 👎.

dd-prapprover-prod-77c48c

This PR has been automatically approved by the DD PR Approver bot.

Co-authored-by: dd-octo-sts-019303[bot] <256648753+dd-octo-sts-019303[bot]@users.noreply.github.com>

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>

gh-worker-campaigns-3e9aa4 · 2026-11-12T21:06:16Z

Auto-rebase complete

Branch is up to date with main — rebased onto 6eabbe9.

_{Auto-Rebase · Add no-auto-rebase to opt out}

new commit added, dismiss all previous approvals

dd-prapprover-prod-77c48c

This PR has been automatically approved by the DD PR Approver bot.

gh-worker-campaigns-3e9aa4 Bot added campaigner-automated-change adms-mode-all-vulns adms-npm adms-patch-update bot_family:adms-dependency-update adms-dependency-update labels Nov 2, 2026

dd-octo-sts-019303 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/integration-tests/2-1793613154 branch from b2e90ce to 89cc865 Compare November 4, 2026 16:00

dd-octo-sts Bot marked this pull request as ready for review November 5, 2026 18:08

dd-octo-sts Bot requested a review from a team as a code owner November 5, 2026 18:08

dd-octo-sts Bot requested review from jcaparelli15 and a balanced review from Copilot November 5, 2026 18:08

Copilot started reviewing November 5, 2026 18:09

View session

Copilot AI reviewed Nov 5, 2026

View reviewed changes

Comment thread integration-tests/package.json

Comment on lines +70 to +71

"@aws-sdk/xml-builder": {

"fast-xml-parser": "^5.8.0"

chatgpt-codex-connector Bot reviewed Nov 5, 2026

View reviewed changes

dd-prapprover-prod-77c48c Bot previously approved these changes Nov 5, 2026

View reviewed changes

dd-octo-sts-4aefcb Bot and others added 3 commits November 12, 2026 21:06

ADMS: minimatch (patch → 10.2.6) [integration-tests/package.json]

90a1d6e

Co-authored-by: dd-octo-sts-019303[bot] <256648753+dd-octo-sts-019303[bot]@users.noreply.github.com>

chore: regenerate lockfiles after rebase

2fe704c

Co-authored-by: dd-octo-sts-019303[bot] <256648753+dd-octo-sts-019303[bot]@users.noreply.github.com>

chore: regenerate lockfiles after rebase

034b763

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>

dd-octo-sts-4aefcb Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/integration-tests/2-1793613154 branch from 89cc865 to 034b763 Compare November 12, 2026 21:06

dd-prapprover-prod-77c48c Bot approved these changes Nov 12, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): minimatch (patch → 10.2.6) [integration-tests/package.json] - #1487

chore(deps): minimatch (patch → 10.2.6) [integration-tests/package.json]#1487
gh-worker-campaigns-3e9aa4[bot] wants to merge 3 commits into
mainfrom
engraver-auto-version-upgrade/minorpatch/npm/integration-tests/2-1793613154

gh-worker-campaigns-3e9aa4 Bot commented Nov 2, 2026 •

edited by dd-octo-sts Bot

Loading

Uh oh!

datadog-datadog-prod-us1-2 Bot commented Nov 2, 2026 •

edited

Loading

Uh oh!

gh-worker-campaigns-3e9aa4 Bot commented Nov 4, 2026

Uh oh!

chatgpt-codex-connector Bot commented Nov 5, 2026 •

edited

Loading

Uh oh!

dd-prapprover-prod-77c48c Bot commented Nov 5, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Nov 5, 2026

Uh oh!

dd-prapprover-prod-77c48c Bot left a comment

Uh oh!

gh-worker-campaigns-3e9aa4 Bot commented Nov 12, 2026

Uh oh!

dd-prapprover-prod-77c48c Bot left a comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

gh-worker-campaigns-3e9aa4 Bot commented Nov 2, 2026 • edited by dd-octo-sts Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Updates

Review Checklist

Uh oh!

datadog-datadog-prod-us1-2 Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Errors

Uh oh!

gh-worker-campaigns-3e9aa4 Bot commented Nov 4, 2026

Auto-rebase complete

Uh oh!

chatgpt-codex-connector Bot commented Nov 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dd-prapprover-prod-77c48c Bot commented Nov 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🛠️ PRApproval Status

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Nov 5, 2026

Choose a reason for hiding this comment

Uh oh!

dd-prapprover-prod-77c48c Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gh-worker-campaigns-3e9aa4 Bot commented Nov 12, 2026

Auto-rebase complete

Uh oh!

dd-prapprover-prod-77c48c Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

gh-worker-campaigns-3e9aa4 Bot commented Nov 2, 2026 •

edited by dd-octo-sts Bot

Loading

datadog-datadog-prod-us1-2 Bot commented Nov 2, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Nov 5, 2026 •

edited

Loading

dd-prapprover-prod-77c48c Bot commented Nov 5, 2026 •

edited

Loading