From 4484594e37085d6a47f42d6db615a5dfa1c77e27 Mon Sep 17 00:00:00 2001
From: "cycode-security[bot]"
 <54410473+cycode-security[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 21:16:41 +0000
Subject: [PATCH] [Cycode] Fix for vulnerable manifest file dependency -
 @opentelemetry/core updated to version 2.8.0

---
 nodejs/packages/layer/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nodejs/packages/layer/package.json b/nodejs/packages/layer/package.json
index d405976e3d..351051aded 100644
--- a/nodejs/packages/layer/package.json
+++ b/nodejs/packages/layer/package.json
@@ -39,7 +39,7 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/api-logs": "^0.203.0",
-    "@opentelemetry/core": "^2.0.0",
+    "@opentelemetry/core": "^2.8.0",
     "@opentelemetry/exporter-logs-otlp-http": "^0.203.0",
     "@opentelemetry/exporter-metrics-otlp-http": "^0.203.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.203.0",