Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps applicationinsights from 1.5.0 to 3.13.0.

Release notes

Sourced from applicationinsights's releases.

3.13.0

microsoft/ApplicationInsights-node.js#1479 microsoft/ApplicationInsights-node.js#1481 microsoft/ApplicationInsights-node.js#1482 microsoft/ApplicationInsights-node.js#1483

3.12.1

microsoft/ApplicationInsights-node.js#1477 microsoft/ApplicationInsights-node.js#1478

3.12.0

microsoft/ApplicationInsights-node.js#1473 microsoft/ApplicationInsights-node.js#1472

3.11.0

microsoft/ApplicationInsights-node.js#1470

3.10.0

#1456 #1462 #1464 #1467

3.9.0

What's Changed

New Contributors

Full Changelog: microsoft/ApplicationInsights-node.js@3.7.0...3.9.0

3.7.0

  • Upgrade @​azure/monitor-opentelemetry to 1.11.0 and @​azure/monitor-opentelemetry/exporter to 1.0.0-beta.31.

3.6.0

  • Updated @​azure/monitor-opentelemetry to 1.9.0 and @​azure/monitor-opentelemetry-exporter to 1.0.0-beta.29

3.5.0

#1401 Update Azure Functions Version #1409 Remove Populating Azure Attributes Limitation from README

3.4.0

#1397 Update OpenTelemetry Links in README #1395 Update Perf Test Name #1392 Send Perf Data to Geneva Upon Run #1390 Update Readme Regarding ESM Support #1387 Remove unused undici import

... (truncated)

Changelog

Sourced from applicationinsights's changelog.

3.13.0 (2026-01-16)

Other Changes

  • Add OpenTelemetry global detection to the agent.
  • Add functionality for the TelemetryClient to not use global providers.
  • Resolve vulnerabilities in dependencies.

3.12.1 (2025-11-10)

Other Changes

  • Updated @​azure/monitor-opentelemetry and @​azure/monitor-opentelemetry-exporter.

3.12.0 (2025-09-29)

Other Changes

3.11.0 (2025-09-25)

Other Changes

3.10.0 (2025-09-16)

Features Added

Other Changes

3.9.0 (2025-08-05)

Bugs Fixed

3.8.0 (2025-07-28)

Features Added

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for applicationinsights since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 26, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/applicationinsights-3.13.0 branch 5 times, most recently from ede011a to 7d5393c Compare January 26, 2026 19:05
@JamieMagee
Copy link
Contributor

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/applicationinsights-3.13.0 branch from 7d5393c to 59b3929 Compare January 26, 2026 19:16
@JamieMagee
Copy link
Contributor

The applicationinsights 3.x SDK has breaking changes that require code updates.

What changed in the SDK:

  • defaultClient is now read-only, so we can't replace it with a custom wrapper
  • Severity levels changed from numeric enums (0, 1, 2...) to strings ('Verbose', 'Information', 'Warning'...)
  • The SDK now expects a connection string instead of an instrumentation key

What I changed:

  • Added a module-level _client variable in insights.js with a getClient() accessor
  • Updated severity handling to work with string values
  • Upgraded winston from v2 to v3 and removed winston-azure-application-insights (it requires applicationinsights 1.x and hasn't been updated)
  • Rewrote logger.js to pipe winston logs to Application Insights directly, matching how we did it in clearlydefined/service

Environment variable change:

  • CRAWLER_INSIGHTS_KEYCRAWLER_INSIGHTS_CONNECTION_STRING

The connection string can be found in Azure Portal under Application Insights → Overview.

See clearlydefined/service#1425 and clearlydefined/service#1432 for reference.

@JamieMagee JamieMagee requested a review from qtomlinson January 26, 2026 19:30
@JamieMagee
Copy link
Contributor

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 26, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot bot and others added 2 commits January 26, 2026 15:46
Bumps [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js) from 1.5.0 to 3.13.0.
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-node.js@1.5.0...3.13.0)

---
updated-dependencies:
- dependency-name: applicationinsights
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
- Use module-level _client instead of read-only defaultClient
- Handle string-based severity levels (Verbose, Information, etc.)
- Upgrade winston to v3, remove winston-azure-application-insights
- Pipe winston logs to Application Insights directly
- Rename CRAWLER_INSIGHTS_KEY to CRAWLER_INSIGHTS_CONNECTION_STRING
@JamieMagee JamieMagee force-pushed the dependabot/npm_and_yarn/applicationinsights-3.13.0 branch from 1393729 to a05ec64 Compare January 26, 2026 23:46
@JamieMagee JamieMagee merged commit d714dc1 into master Jan 26, 2026
2 checks passed
@JamieMagee JamieMagee deleted the dependabot/npm_and_yarn/applicationinsights-3.13.0 branch January 26, 2026 23:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants