Update mvnpm by red-hat-konflux-kflux-prd-rh02[bot] · Pull Request #1826 · quarkusio/code.quarkus.io

red-hat-konflux-kflux-prd-rh02 · 2026-06-16T00:23:01Z

This PR contains the following updates:

Package	Change	Age	Confidence
org.mvnpm:nanoid	`5.1.11` → `5.1.16`
org.mvnpm.at.stdlib:types (source)	`0.4.3` → `0.5.1`
org.mvnpm.at.sentry:types (source)	`10.56.0` → `10.61.0`
org.mvnpm.at.sentry:core (source)	`10.56.0` → `10.61.0`
org.mvnpm.at.sentry:browser (source)	`10.56.0` → `10.60.0`
org.mvnpm.at.sentry-internal:replay-canvas (source)	`10.56.0` → `10.57.0`
org.mvnpm.at.sentry-internal:feedback (source)	`10.56.0` → `10.57.0`

Release Notes

ai/nanoid (org.mvnpm:nanoid)

`v5.1.16`

Compare Source

Fixed forever loop on negative size (by @spokodev).

`v5.1.15`

Compare Source

Fixed random pool corruption on big ID sizes.

`v5.1.14`

Compare Source

Fixed npm package size regression.

stdlib-js/types (org.mvnpm.at.stdlib:types)

`v0.5.1`

Compare Source

No changes reported for this release.

getsentry/sentry-javascript (org.mvnpm.at.sentry:types)

`v10.61.0`

Compare Source

Important Changes

feat(core): Enable streamGenAiSpans by default (#21732)

The SDK now extracts all gen_ai spans out of a transaction and sends them as v2 envelope items by default. This prevents gen_ai spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated by default. Set enableTruncation: true on the respective AI integration to re-enable truncation. To keep the previous behavior, set streamGenAiSpans: false.

Self-hosted Sentry users should opt out with streamGenAiSpans: false, since streamed gen_ai spans may not be ingested by their Sentry instance.

Other Changes

feat(cloudflare): Add batch, exec, and withSession D1 instrumentation (#21292)
feat(cloudflare): Instrument SQL API in sqlite durable objects (#21656)
feat(core): Add db.query.summary functionality (#21670)
feat(core): Add top-level Sentry.setAttribute(s) APIs (#21705)
fix(hono): Name transactions after the matched route handler (#21700)
fix(react-router): Bump peerDependencies for react-router 8 (#21762)
fix(replays): Record replay trace_ids with span streaming (#21714)

Internal Changes

build: add rollup plugin for compile-time ESM/CJS code branching (#21715)
chore: Fix version bump for bundler plugin fixtures (#21707)
chore(node-integration-tests): Improve node test runner naming (#21685)
docs: Update contributing guide for E2E tests (#21763)
feat: Adopt bindTracingChannelToSpan across runtimes (#21642)
feat: Remove Otel from fsIntegration (#21654)
feat(deps): Bump http-proxy-middleware from 2.0.9 to 2.0.10 (#21709)
feat(server-utils): Add tracingChannel-to-span binding (#21641)
fix(tests): Add dedicated route for Hono query_string tests (#21731)
ref: Export SPAN_KIND from core and drop OTel SpanKind imports (#21668)
test: Make bundler plugins tests work after release
test: Remove duplicated test (#21699)
test: retry npm install on network hiccups (#21689)
test(cloudflare): Increase node count for memory tests (#21719)
test(e2e): Add sentry-sdk-init measure and marks (#21687)
test(e2e): Add more lighthouse react e2e test SDK init modes (#21711)
test(node): Add esm/cjs specific test runner utils (#21729)
test(node): Increase cron integration test timeout to 60s (#21704)
test(node): Streamline amqplib tests (#21723)
test(node): Update mysql tests for better coverage and correctness (#21684)
test(node): Use different ports for redis tests (#21727)

`v10.60.0`

Compare Source

Other Changes

feat(cloudflare): Add R2 bucket auto-instrumentation (#21327)
feat(core): Add bindScopeToEmitter to bind a scope to an event emitter (#21594)
feat(deps): Bump @hapi/wreck from 18.1.0 to 18.1.2 (#21178)
fix(browser): Ensure url.full and http.url attributes have the same values on http.client spans (#21660)
fix(server-utils): Avoid directly importing tracingChannel for Node v18 compatibility (#21662)
fix(server-utils): Remove optional vite peer dependency (#21677)

Internal Changes

chore: Add bundler-plugins to craft (#21701)
chore: Cleanup unused imports of @opentelemetry/core (#21679)
fix(bundler-plugins): Integration with monorepo build (#21479)
ref(core): Gate updateName() custom source on an OTel inference brand (#21649)
ref(core/opentelemetry): Move OTel span data inference from captureSpan to SentrySpanProcessor (#21648)
ref(node): Remove unused sql-common helper and @opentelemetry/core dep (#21688)
ref(node): Streamline kafkajs instrumentation (#21647)
ref(node): Streamline undici (node-fetch) instrumentation (#21650)
ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependency (#21691)
ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)

`v10.59.0`

Compare Source

Important Changes

feat(react-router): Add support for React Router v8 (#21633)

The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

feat(react): Add version-agnostic React Router SPA exports (#21633)

@sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation.
The new exports replace the version-specific V6/V7 variants, which are now deprecated:

Deprecated	New
`reactRouterV6BrowserTracingIntegration` / `V7`	`reactRouterBrowserTracingIntegration`
`withSentryReactRouterV6Routing` / `V7`	`wrapReactRouterRouting`
`wrapCreateBrowserRouterV6` / `V7`	`wrapCreateBrowserRouter`
`wrapCreateMemoryRouterV6` / `V7`	`wrapCreateMemoryRouter`
`wrapUseRoutesV6` / `V7`	`wrapUseRoutes`

The deprecated exports continue to work and will be removed in the next major version.

Other Changes

feat(aws-serverless): Instrument aws-sdk clients >= 3.1046.0 (#21548)
feat(bun): Add orchestrion bun build plugin (#21410)
feat(cloudflare): Instrument sync KV (#21316)
feat(core): Disable gen_ai message truncation by default when streamGenAiSpans is enabled (#21603)
feat(deno): Add orchestrion deno runtime hook (#21451)
feat(hono): Extend peer dependency range (#21550)
feat(node): Collapse orchestrion opt-in to a single option (#20900)
fix: Diagnostics channel Node v18 (#21631)
fix(browser): Clean up pageload readystatechange listener (#21632)
fix(core): Capture scopes on span before emitting spanStart event (#21644)
fix(core): Defer TwP sampling by reading trace state from the scope (#21549)
fix(core): Prevent outgoing HTTP instrumentation from crashing on // request paths (#21645)
fix(core): Set production as default sentry.environment attribute value on streamed spans (#21637)
fix(nextjs): Register safe random ID context at module load (#21573)

Internal Changes

chore: Change deprecation/deprecation to oxlint equivalent (#21604)
chore: Switch license headers to SPDX format (#21357)
chore(deps-dev): Bump esbuild from 0.20.0 to 0.28.1 (#21511)
chore(deps): Bump esbuild from 0.25.0 to 0.28.1 in /dev-packages/e2e-tests/test-applications/node-profiling-esm (#21514)
chore(deps): Bump react-router-6 to 6.30.4 (#21566)
ci: Assign server team as codeowner for server-utils package (#21601)
ci: Dedup flaky test issues across esm/cjs variants (#21595)
ci: Do not apply Bug label to flaky test issues (#21593)
ci: Pin react-router latest and add eslint disable for deprecated attribute (#21624)
ci(deps): Bump actions/download-artifact from 7 to 8 (#21303)
ci(security-fixes): Enable cron trigger (#21547)
docs: Clarify comment and PR-body guidelines for agents (#21596)
feat(deps-dev): Bump @sveltejs/kit from 2.53.3 to 2.60.1 in /dev-packages/e2e-tests/test-applications/sveltekit-2-svelte-5 (#21212)
feat(deps-dev): Bump esbuild from 0.19.12 to 0.28.1 in /dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev (#21512)
feat(deps): Bump @babel/core from 7.29.0 to 7.29.6 (#21574)
feat(deps): Bump @prisma/adapter-pg from 7.2.0 to 7.8.0 (#21106)
feat(deps): Bump hono from 4.12.21 to 4.12.25 (#21610)
feat(deps): Bump launch-editor from 2.12.0 to 2.14.1 (#21577)
feat(deps): Bump protobufjs from 7.5.9 to 7.6.4 (#21578)
feat(deps): Bump vite from 5.4.21 to 6.4.3 (#21576)
fix(node): Restore eslint-disable in vendored tedious instrumentation (#21616)
ref(aws-serverless): Remove unused parts of vendored aws-sdk instrumentation (#21563)
ref(aws-serverless): Streamline aws-sdk instrumentation (#21564)
ref(aws-serverless): Use @sentry/conventions (#21597)
ref(build): Switch TypeScript moduleResolution to bundler (#21559)
ref(ci): Dedupe matrix test failures in CI failure reporter (#21538)
ref(ci): Skip PR review reminders for changes-requested PRs (#21526)
ref(nestjs): Set nest span op/origin at span creation (#21531)
ref(nestjs): Use @sentry/conventions (#21492)
ref(nextjs): Use @sentry/conventions (#21493)
ref(node-core): Use @sentry/conventions (#21494)
ref(node): Set generic-pool span origin at span creation (#21533)
ref(node): Streamline connect (#21404)
ref(node): Streamline graphql instrumentation (#21556)
ref(node): Streamline hapi instrumentation (#21602)
ref(node): Streamline ioredis instrumentation (#21560)
ref(node): Streamline knex instrumentation (#21561)
ref(node): Streamline koa (#21554)
ref(node): Streamline mongodb instrumentation (#21619)
ref(node): Streamline mongoose instrumentation (#21481)
ref(node): Streamline mysql2 instrumentation (#21509)
ref(node): Streamline pg instrumentation (#21583)
ref(node): Streamline redis instrumentation (#21582)
ref(node): Streamline tedious instrumentation (#21598)
ref(node): Streamline vendored fs instrumentation (#21532)
ref(opentelemetry): Use @sentry/conventions (#21495)
ref(protocol): Strictly type profile chunk platform item header (#21562)
ref(react-router): Use @sentry/conventions (#21496)
ref(remix): Use @sentry/conventions (#21497)
ref(server-utils): Move orchestrion into server-utils
ref(server-utils): Use @sentry/conventions (#21490)
ref(tanstackstart-react): Use @sentry/conventions (#21498)
test(cloudflare): Add mTLS instrumentation test (#21569)
test(cloudflare): Increasing timeout and exit with reason (#21571)
test(cloudflare): Prevent spurious unhandled rejection in integration test runner (#21545)
test(cloudflare): Remove mock in DO tests (#21634)
test(cloudflare): Skip flaky DO RPC private-fields integration test (#21544)
test(hono): Fix flaky query_string transaction matcher (#21542)
test(node-core): Fix flaky cron instrumentation test (#21553)
test(node): Make amqplib integration test order-independent (#21541)
test(node): Make amqplib v1 integration test order-independent (#21534)
test(node): Use random port in hono tracing scenario to avoid CI flakes (#21536)
test(remix-hydrogen): Fix flaky navigation transaction test (#21535)

`v10.58.0`

Compare Source

Important Changes

feat(hono): Add support for the Deno runtime (#21450)

@sentry/hono now supports the Deno runtime via a new @sentry/hono/deno entry point.
Install @sentry/deno as a peer dependency and initialize Sentry through the sentry() middleware:

import { Hono } from 'hono';
import { sentry } from '@&#8203;sentry/hono/deno';

const app = new Hono();

app.use(
  sentry(app, {
    dsn: '__DSN__', // or Deno.env.get('SENTRY_DSN')
    tracesSampleRate: 1.0,
  }),
);

Deno.serve(app.fetch);

feat(core): Extract objects as structured logs in consoleLoggingIntegration (#21385)

The consoleLoggingIntegration now extracts structured log attributes when the first argument is a plain object.

// Object keys become log attributes
console.log({ userId: 123, action: 'login' }, 'User logged in');
// → attributes: { userId: 123, action: "login" }

// Non-object first args use template + parameters (unchanged)
console.log('Hello', 'world', 123);
// → sentry.message.template: "Hello {} {}"

feat(react-router): Stabilize the instrumentation API (#21470)

React Router's instrumentation API is now stable — the @experimental markers have been removed from createSentryServerInstrumentation, createSentryClientInstrumentation, and the related helpers and types.
The manual server wrappers wrapServerLoader and wrapServerAction are now deprecated in favor of it. Export instrumentations = [Sentry.createSentryServerInstrumentation()] from your entry.server.tsx to instrument all loaders and actions without wrapping them individually.

Other Changes

feat(hono): Add HTTP connection info to server spans (#21408)
feat(node-core): Attach log message and fields to pino error events (#21422)
feat(react-router): Always build client instrumentation and deprecate useInstrumentationAPI (#21432)
feat(react-router): Rename client navigation roots from the route pattern (#21463)
fix(astro): Resolve middleware export types (#21414)
fix(browser): Ignore __sentry_wrapped__ inherited from Function.prototype (#21506)
fix(core): Avoid double counting cached input tokens for Vercel AI SDK v6 (#21488)
fix(core): Keep safeJoin side-effect-free for DOM elements (#21356)
fix(deno): Use correct paths for module and types fields in package.json (#21449)
fix(nextjs): Mark redirect server actions as ok instead of internal_error (#21521)
fix(react-router): Mark instrumentation API active on invocation (#21420)
fix(redis): Bring span attributes into alignment with conventions
fix(sveltekit): Add default exports condition (#21472)
fix(tanstackstart-react): Preserve middleware context types (#21441)
perf(core): Reuse unchanged Vercel AI messages JSON

Work in this release was contributed by @archievi, @AyaanFaisal21, @itosa-kazu, and @bkchr. Thank you for your contributions!

Internal Changes

chore: Pin OTel to <2.8.0 in ts 3.8 test app (#21474)
chore(ci): Add dependabot auto-triage pipeline (#21318)
chore(dependabot): Group react-router packages to bump in unison (#21442)
chore(deps-dev): Bump the react-router group across 1 directory with 3 updates (#21448)
chore(deps): Bump @hapi/content from 6.0.1 to 6.0.2 (#21180)
chore(deps): Bump getsentry/craft from 2.26.2 to 2.26.9 (#21444)
chore(deps): Bump hono from 4.12.18 to 4.12.21 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#21340)
chore(deps): Bump nx to 22.7.5 (#21527)
chore(deps): Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#21302)
chore(size-limit): weekly auto-bump (#21501)
ci(dependabot-triage): Add outcome step (#21507)
ci(deps): Bump actions/github-script from 7 to 9 (#21300)
ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.142 (#21445)
feat(deps): Bump shell-quote from 1.8.3 to 1.8.4 (#21412)
feat(deps): Bump the remix group with 4 updates (#21447)
feat(nestjs): Migrate vendored nest instrumentation to Sentry APIs (#21516)
ref: Remove unused SENTRY_BUILD_PRESERVE_MODULES env check from rollup configs (#21487)
ref: Rename published internal packages (#21371)
ref(nestjs): Streamline nestjs-core (#21434)
ref(node): Drop eslint-ignores and oxlint exemption in generic-pool instrumentation (#21435)
ref(node): Migrate vendored generic-pool instrumentation to Sentry APIs (#21523)
ref(node): Streamline dataloader instrumentation (#21475)
ref(node): Streamline generic-pool (#21363)
test: Skip nuxt-5 E2E test (#21524)
test(astro): Add Astro 7 e2e app (#21471)
test(node): Remove generic-pool fake unit test (#21439)
test(node): Replace lru-memoizer fake unit test with integration coverage (#21437)
test(react-router): Add Redis-backed DB-span coverage to rr7 (#21398)
test(react-router): Finalize instrumentation api e2e coverage (#21468)
test(react-router): Fix e2e tests (#21485)
test(react-router): Verify client fetch instrumentation hook fires (#21402)
test(tanstackstart-react): Initialize Sentry from a dedicated client init file (#21397)

`v10.57.0`

Compare Source

Important Changes

feat(angular): Add support for Angular 22 (#21330)

@sentry/angular now officially supports Angular 22.
ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data.
sendDefaultPii: true still works and maps to enabling all dataCollection categories.
dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default.
Data you set explicitly (like via Sentry.setUser()) is always sent regardless.
When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:
```
Sentry.init({
  dataCollection: {
    userInfo: false,
    genAI: { inputs: false, outputs: false },
    httpBodies: [],
    httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
  },
});
```

Other Changes

feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
feat(cloudflare): Auto instrument D1 based on env (#21276)
feat(core): Change default of dataCollection.userInfo to true (#21348)
feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
feat(hono): Filter noisy transactions (favicon etc) (#21365)
fix(cloudflare): Don't track negatively sampled spans (#21367)
fix(core): Use safeDateNow calls for new Date() reads (#21351)
fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
fix(react): Remove unused react.componentStack event context (#21183)
fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)

Internal Changes

chore: Bump volta node version from 20.19.2 to 20.19.5 (#21359)
chore: Remove git:* allowed permissions (#21328)
chore(deps-dev): Bump eslint-plugin-regexp from 1.15.0 to 3.1.0 (#21104)
chore(deps-dev): Bump react-router from 7.13.0 to 7.15.0 (#21337)
chore(size-limit): weekly auto-bump (#21344)
docs(remix): Add notice about capturing http bodies for form data keys (#21296)
feat(deps): Bump @types/aws-lambda from 8.10.150 to 8.10.161 (#21105)
feat(deps): Bump axios from 1.15.2 to 1.16.0 (#21251)
feat(deps): Bump hono from 4.12.18 to 4.12.21 (#21341)
ref(browser): Split web vitals integration (#21210)
ref(node): Streamline lru-memoizer instrumentation (#21350)
ref(node): Streamline sql-common (#21360)
test(e2e): Migrate sendDefaultPii to dataCollection option (#21288)
test(nextjs): Remove assertion on conditional span (#21329)
test(node): Move node integration tests to data collection (#21283)

Work in this release was contributed by @zhongrenfei1-hub. Thank you for your contribution!

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/mvnpm branch 6 times, most recently from d472994 to 7027302 Compare June 24, 2026 08:08

red-hat-konflux-kflux-prd-rh02 Bot changed the title ~~fix(deps): update mvnpm~~ Update mvnpm Jun 25, 2026

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/mvnpm branch 3 times, most recently from ba857bd to 1fa6f95 Compare June 27, 2026 12:08

Update mvnpm

e5984ad

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/mvnpm branch from 1fa6f95 to e5984ad Compare June 28, 2026 12:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update mvnpm#1826

Update mvnpm#1826
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/mvnpm

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Important Changes

Other Changes

Other Changes

Important Changes

Other Changes

Important Changes

Other Changes

Important Changes

Other Changes

Configuration

Documentation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 16, 2026 •

edited

Loading