From 396a4ef1f7c6a28d76dfd9a7a0a3652ad0bfd75b Mon Sep 17 00:00:00 2001
From: "cycode-security[bot]"
 <54410473+cycode-security[bot]@users.noreply.github.com>
Date: Tue, 6 Oct 2026 08:12:29 +0000
Subject: [PATCH] [Cycode] Fix for vulnerable manifest file dependency -
 @opentelemetry/instrumentation-mysql2 updated to version 0.67.0

---
 nodejs/packages/layer/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nodejs/packages/layer/package.json b/nodejs/packages/layer/package.json
index d405976e3d..40c4baef11 100644
--- a/nodejs/packages/layer/package.json
+++ b/nodejs/packages/layer/package.json
@@ -66,7 +66,7 @@
     "@opentelemetry/instrumentation-mongodb": "^0.56.0",
     "@opentelemetry/instrumentation-mongoose": "^0.50.0",
     "@opentelemetry/instrumentation-mysql": "^0.49.0",
-    "@opentelemetry/instrumentation-mysql2": "^0.49.0",
+    "@opentelemetry/instrumentation-mysql2": "^0.67.0",
     "@opentelemetry/instrumentation-nestjs-core": "^0.49.0",
     "@opentelemetry/instrumentation-net": "^0.47.0",
     "@opentelemetry/instrumentation-pg": "^0.55.0",