Skip to content

dev: bump the safe group with 9 updates#7607

Merged
ryaplots merged 1 commit into
v3.34from
dependabot/npm_and_yarn/safe-543d072c84
Apr 29, 2025
Merged

dev: bump the safe group with 9 updates#7607
ryaplots merged 1 commit into
v3.34from
dependabot/npm_and_yarn/safe-543d072c84

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2025

Bumps the safe group with 9 updates:

Package From To
@sentry/react 9.13.0 9.14.0
apexcharts 4.6.0 4.7.0
@inquirer/prompts 7.4.1 7.5.0
@pmmmwh/react-refresh-webpack-plugin 0.5.16 0.6.0
cypress 14.3.1 14.3.2
eslint-plugin-jsdoc 50.6.9 50.6.11
pg 8.14.1 8.15.6
stylelint 16.18.0 16.19.1
webpack 5.99.6 5.99.7

Updates @sentry/react from 9.13.0 to 9.14.0

Release notes

Sourced from @​sentry/react's releases.

9.14.0

Important Changes

  • feat: Add Supabase Integration (#15719)

This PR adds Supabase integration to @sentry/core, allowing automatic instrumentation of Supabase client operations (database queries and authentication) for performance monitoring and error tracking.

  • feat(nestjs): Gracefully handle RPC scenarios in SentryGlobalFilter (#16066)

This PR adds better RPC exception handling to @sentry/nestjs, preventing application crashes while still capturing errors and warning users when a dedicated filter is needed. The implementation gracefully handles the 'rpc' context type in SentryGlobalFilter to improve reliability in hybrid applications.

  • feat(react-router): Trace propagation (#16070)

This PR adds trace propagation to @sentry/react-router by providing utilities to inject trace meta tags into HTML headers and offering a pre-built Sentry-instrumented request handler, improving distributed tracing capabilities across page loads.

Other Changes

  • feat(deps): Bump @​prisma/instrumentation from 6.5.0 to 6.6.0 (#16102)
  • feat(nextjs): Improve server component data (#15996)
  • feat(nuxt): Log when adding HTML trace meta tags (#16044)
  • fix(node): Make body capturing more robust (#16105)
  • ref(node): Log when incoming request bodies are being captured (#16104)

Bundle size 📦

Path Size
@​sentry/browser 23.28 KB
@​sentry/browser - with treeshaking flags 23.12 KB
@​sentry/browser (incl. Tracing) 36.99 KB
@​sentry/browser (incl. Tracing, Replay) 74.17 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 67.55 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 78.83 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 90.65 KB
@​sentry/browser (incl. Feedback) 39.68 KB
@​sentry/browser (incl. sendFeedback) 27.9 KB
@​sentry/browser (incl. FeedbackAsync) 32.67 KB
@​sentry/react 25.09 KB
@​sentry/react (incl. Tracing) 38.91 KB
@​sentry/vue 27.51 KB
@​sentry/vue (incl. Tracing) 38.71 KB
@​sentry/svelte 23.32 KB
CDN Bundle 24.5 KB
CDN Bundle (incl. Tracing) 36.98 KB
CDN Bundle (incl. Tracing, Replay) 72 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 77.16 KB
CDN Bundle - uncompressed 71.49 KB
CDN Bundle (incl. Tracing) - uncompressed 109.34 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 220.63 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 233.16 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

9.14.0

Important Changes

  • feat: Add Supabase Integration (#15719)

This PR adds Supabase integration to @sentry/core, allowing automatic instrumentation of Supabase client operations (database queries and authentication) for performance monitoring and error tracking.

  • feat(nestjs): Gracefully handle RPC scenarios in SentryGlobalFilter (#16066)

This PR adds better RPC exception handling to @sentry/nestjs, preventing application crashes while still capturing errors and warning users when a dedicated filter is needed. The implementation gracefully handles the 'rpc' context type in SentryGlobalFilter to improve reliability in hybrid applications.

  • feat(react-router): Trace propagation (#16070)

This PR adds trace propagation to @sentry/react-router by providing utilities to inject trace meta tags into HTML headers and offering a pre-built Sentry-instrumented request handler, improving distributed tracing capabilities across page loads.

Other Changes

  • feat(deps): Bump @​prisma/instrumentation from 6.5.0 to 6.6.0 (#16102)
  • feat(nextjs): Improve server component data (#15996)
  • feat(nuxt): Log when adding HTML trace meta tags (#16044)
  • fix(node): Make body capturing more robust (#16105)
  • ref(node): Log when incoming request bodies are being captured (#16104)
Commits
  • 0b63710 release: 9.14.0
  • c9c49f5 Merge pull request #16115 from getsentry/prepare-release/9.14.0
  • 7c0365c rm ref pr
  • 749eda9 meta(changelog): Update changelog for 9.14.0
  • 20ce849 feat(nestjs): Gracefully handle RPC scenarios in SentryGlobalFilter (#16066)
  • 7438608 feat(nextjs): Improve server component data (#15996)
  • a3d0224 ref(core): Remove internal utils-hoist re-export (#16114)
  • 88ba26b fix(node): Make body capturing more robust (#16105)
  • 447e62e feat(deps): Bump @​prisma/instrumentation from 6.5.0 to 6.6.0 (#16102)
  • 8026b85 build(deps): Bump fastify from 5.0.0 to 5.3.2 in /dev-packages/e2e-tests/test...
  • Additional commits viewable in compare view

Updates apexcharts from 4.6.0 to 4.7.0

Release notes

Sourced from apexcharts's releases.

💎 Version 4.7.0

What's Changed

Cleaned up misplaced resolve() call in updateOptions()

Commits

Updates @inquirer/prompts from 7.4.1 to 7.5.0

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​7.5.0

  • Feat(@​inquirer/select): Added an instructions option allowing to customize the messages in the help tips.
  • Feat(@​inquirer/rawlist): Arrow keys will now cycle through the option, just like the @inquirer/select prompt. Also added a loop option to control the list loop behaviour when reaching the boundaries.
Commits
  • 238c3af Publish
  • cad9af0 Feat(@​inquirer/rawlist): Support using arrow keys on the rawlist prompt (#1728)
  • 5746381 Feat(@​inquirer/select): Expose customization of the usage instructions (#1727)
  • 9853460 Chore(deps-dev): Bump the linting group with 3 updates (#1726)
  • 4a33400 Chore(deps-dev): Bump the linting group with 2 updates (#1718)
  • 79832b4 Chore(deps-dev): Bump lerna from 8.2.1 to 8.2.2 (#1719)
  • 65547a4 Chore(deps-dev): Bump @​types/node from 22.14.0 to 22.14.1 (#1720)
  • 27d4a95 Chore(deps): Bump vite from 6.2.5 to 6.2.6 in the npm_and_yarn group (#1717)
  • 24857f7 Chore(deps-dev): Bump typescript from 5.8.2 to 5.8.3 (#1716)
  • 3ef8b43 Chore(deps-dev): Bump the linting group with 2 updates (#1715)
  • Additional commits viewable in compare view

Updates @pmmmwh/react-refresh-webpack-plugin from 0.5.16 to 0.6.0

Changelog

Sourced from @​pmmmwh/react-refresh-webpack-plugin's changelog.

0.6.0 (28 Apr 2025)

BREAKING

  • Minimum required Node.js version has been bumped to 18.12.0.
  • Minimum required webpack version has been bumped to 5.2.0.
  • Minimum supported webpack-dev-server version has been bumped to 4.8.0.
  • Minimum supported webpack-plugin-serve version has been bumped to 1.0.0.
  • overlay.sockHost, overlay.sockPath, overlay.sockPort, overlay.sockProtocol and overlay.useURLPolyfill have all been removed (#850). It was necessary to support WDS below 4.8.0 (published in April 2022). It is no-longer necessary as a direct integration with WDS is now possible.

Features

  • Added helper script to better support use cases where React and/or React-DOM are externalized (#852)

Fixes

  • Ensure plugin injected entries are no-op in production (#900)

Internal

  • Dropped support for Webpack 4 / WDS 3 (#850, #904)
  • Migrated from ansi-html to anser in error overlay (#854)
  • Bumped all development dependencies (#905)
Commits

Updates cypress from 14.3.1 to 14.3.2

Release notes

Sourced from cypress's releases.

v14.3.2

Changelog: https://docs.cypress.io/app/references/changelog#14-3-2

Commits

Updates eslint-plugin-jsdoc from 50.6.9 to 50.6.11

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v50.6.11

50.6.11 (2025-04-25)

Bug Fixes

  • check-values: workaround parse-imports-exports bug in handling trailing whitespace; fixes #1373 (#1374) (65b0dc0)

v50.6.10

50.6.10 (2025-04-23)

Bug Fixes

  • check-values, no-undefined-types: avoid need for worker; fixes #1371 (#1372) (6d5c9fb)
Commits
  • 65b0dc0 fix(check-values): workaround parse-imports-exports bug in handling trail...
  • 6d5c9fb fix(check-values, no-undefined-types): avoid need for worker; fixes #1371...
  • See full diff in compare view

Updates pg from 8.14.1 to 8.15.6

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.15.0

  • Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

pg@8.13.0

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

pg@8.8.0

pg-pool@3.5.0

pg@8.7.0

  • Add optional config to pool to allow process to exit if pool is idle.

pg-cursor@2.7.0

... (truncated)

Commits

Updates stylelint from 16.18.0 to 16.19.1

Release notes

Sourced from stylelint's releases.

16.19.1

16.19.0

It adds 2 options to 2 rules and fixes 3 bugs.

  • Added: exceptWithoutPropertyFallback: [] to function-allowed-list (#8488) (@​ryo-manba).
  • Added: ignore: ["four-into-three-edge-values"] to shorthand-property-no-redundant-values (#8527) (@​ryo-manba).
  • Fixed: compact formatter with pnpm to newline the exit code (#8534) (@​konomae).
  • Fixed: declaration-property-value-no-unknown range and message for invalid syntax within known functions (#8528) (@​ryo-manba).
  • Fixed: no-empty-source false positives for --report-needless-disables (#8536) (@​romainmenke).
Changelog

Sourced from stylelint's changelog.

16.19.1 - 2025-04-25

16.19.0 - 2025-04-23

It adds 2 options to 2 rules and fixes 3 bugs.

  • Added: exceptWithoutPropertyFallback: [] to function-allowed-list (#8488) (@​ryo-manba).
  • Added: ignore: ["four-into-three-edge-values"] to shorthand-property-no-redundant-values (#8527) (@​ryo-manba).
  • Fixed: compact formatter with pnpm to newline the exit code (#8534) (@​konomae).
  • Fixed: declaration-property-value-no-unknown range and message for invalid syntax within known functions (#8528) (@​ryo-manba).
  • Fixed: no-empty-source false positives for --report-needless-disables (#8536) (@​romainmenke).
Commits

Updates webpack from 5.99.6 to 5.99.7

Release notes

Sourced from webpack's releases.

v5.99.7

Fixes

  • Don't skip export generation for default reexport (#19463)
  • Fixed module library export generation for reexport (#19459)
  • Avoid module concatenation in child compilation for module library (#19457)
  • Ensure HMR recover gracefully when CSS module with error
  • Respect cause of any errors and errors of AggregateError in stats output
  • Added missing @types/json-schema in types
Commits
  • ad77deb chore(release): 5.99.7
  • 1e9cb42 chore(deps-dev): bump @​types/node in the dependencies group (#19466)
  • 3b18244 ci: temporary disable
  • 246d8ba ci: update github action too (#19465)
  • c585928 chore: fix example
  • 1304500 ci: fix examples command
  • ec9e9ef ci: update examples automatically (#19464)
  • dc33a1e fix: don't skip export generation for default reexport (#19463)
  • 648e026 fix: module library export generation for reexport (#19459)
  • 519187b fix: avoid module concatenation in child compilation for module library (#1...
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
cypress [>= 9.a, < 10]
cypress [>= 10.a, < 11]
eslint-plugin-jsdoc [>= 39.6.a, < 39.7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `9.13.0` | `9.14.0` |
| [apexcharts](https://github.com/apexcharts/apexcharts.js) | `4.6.0` | `4.7.0` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `7.4.1` | `7.5.0` |
| [@pmmmwh/react-refresh-webpack-plugin](https://github.com/pmmmwh/react-refresh-webpack-plugin) | `0.5.16` | `0.6.0` |
| [cypress](https://github.com/cypress-io/cypress) | `14.3.1` | `14.3.2` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `50.6.9` | `50.6.11` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.14.1` | `8.15.6` |
| [stylelint](https://github.com/stylelint/stylelint) | `16.18.0` | `16.19.1` |
| [webpack](https://github.com/webpack/webpack) | `5.99.6` | `5.99.7` |


Updates `@sentry/react` from 9.13.0 to 9.14.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@9.13.0...9.14.0)

Updates `apexcharts` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/apexcharts/apexcharts.js/releases)
- [Commits](apexcharts/apexcharts.js@v4.6.0...v4.7.0)

Updates `@inquirer/prompts` from 7.4.1 to 7.5.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@7.4.1...@inquirer/prompts@7.5.0)

Updates `@pmmmwh/react-refresh-webpack-plugin` from 0.5.16 to 0.6.0
- [Release notes](https://github.com/pmmmwh/react-refresh-webpack-plugin/releases)
- [Changelog](https://github.com/pmmmwh/react-refresh-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pmmmwh/react-refresh-webpack-plugin/commits)

Updates `cypress` from 14.3.1 to 14.3.2
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v14.3.1...v14.3.2)

Updates `eslint-plugin-jsdoc` from 50.6.9 to 50.6.11
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Changelog](https://github.com/gajus/eslint-plugin-jsdoc/blob/main/.releaserc)
- [Commits](gajus/eslint-plugin-jsdoc@v50.6.9...v50.6.11)

Updates `pg` from 8.14.1 to 8.15.6
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.15.6/packages/pg)

Updates `stylelint` from 16.18.0 to 16.19.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.18.0...16.19.1)

Updates `webpack` from 5.99.6 to 5.99.7
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.99.6...v5.99.7)

---
updated-dependencies:
- dependency-name: "@sentry/react"
  dependency-version: 9.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: apexcharts
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@inquirer/prompts"
  dependency-version: 7.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@pmmmwh/react-refresh-webpack-plugin"
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: cypress
  dependency-version: 14.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 50.6.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: pg
  dependency-version: 8.15.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: stylelint
  dependency-version: 16.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: webpack
  dependency-version: 5.99.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 28, 2025
@dependabot dependabot Bot requested a review from a team as a code owner April 28, 2025 23:52
@dependabot dependabot Bot requested a review from ryaplots April 28, 2025 23:52
@ryaplots ryaplots merged commit b90cee9 into v3.34 Apr 29, 2025
12 of 13 checks passed
@ryaplots ryaplots deleted the dependabot/npm_and_yarn/safe-543d072c84 branch April 29, 2025 12:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant