Skip to content

fix(deps): update all non-major dependencies#198

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#198
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 10, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update
@sentry/node (source) ^10.51.0^10.53.1 age confidence dependencies minor
@vitest/coverage-v8 (source) ^4.1.5^4.1.6 age confidence devDependencies patch
actions/setup-node v6.2.0v6.4.0 age confidence action minor
influxdb 2.8-alpine2.9-alpine age confidence minor
oxfmt (source) ^0.48.0^0.49.0 age confidence devDependencies minor
oxlint (source) ^1.63.0^1.64.0 age confidence devDependencies minor
pnpm (source) 10.33.310.33.4 age confidence packageManager patch
taze ^19.11.0^19.12.0 age confidence devDependencies minor
tsdown (source) ^0.21.10^0.22.0 age confidence devDependencies minor
vitest (source) ^4.1.5^4.1.6 age confidence devDependencies patch

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v10.53.1

Compare Source

  • fix(core): Don't gate user data for streamed spans at scope read time (#​20827)
  • fix(core): Include subpath type shims in published package (#​20835)
  • ref(hono): Consolidate route patching and add clarification comments (#​20829)
Internal Changes
  • chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15-intl (#​20821)

Bundle size 📦

Path Size
@​sentry/browser 26.22 KB
@​sentry/browser - with treeshaking flags 24.69 KB
@​sentry/browser (incl. Tracing) 43.69 KB
@​sentry/browser (incl. Tracing + Span Streaming) 45.62 KB
@​sentry/browser (incl. Tracing, Profiling) 48.56 KB
@​sentry/browser (incl. Tracing, Replay) 82.4 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 72.08 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 86.99 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 99.33 KB
@​sentry/browser (incl. Feedback) 43 KB
@​sentry/browser (incl. sendFeedback) 30.92 KB
@​sentry/browser (incl. FeedbackAsync) 35.91 KB
@​sentry/browser (incl. Metrics) 27.27 KB
@​sentry/browser (incl. Logs) 27.42 KB
@​sentry/browser (incl. Metrics & Logs) 28.08 KB
@​sentry/react 27.92 KB
@​sentry/react (incl. Tracing) 45.9 KB
@​sentry/vue 31.01 KB
@​sentry/vue (incl. Tracing) 45.5 KB
@​sentry/svelte 26.24 KB
CDN Bundle 28.55 KB
CDN Bundle (incl. Tracing) 46.04 KB
CDN Bundle (incl. Logs, Metrics) 29.89 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 47.14 KB
CDN Bundle (incl. Replay, Logs, Metrics) 68.3 KB
CDN Bundle (incl. Tracing, Replay) 82.55 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 83.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 88.23 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 89.3 KB
CDN Bundle - uncompressed 83.97 KB
CDN Bundle (incl. Tracing) - uncompressed 138.12 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 88.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 141.5 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 209.97 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 254.05 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 257.42 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 267.43 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 270.79 KB
@​sentry/nextjs (client) 48.36 KB
@​sentry/sveltekit (client) 44.17 KB
@​sentry/node-core 59.39 KB
@​sentry/node 162.07 KB
@​sentry/node - without tracing 72.21 KB
@​sentry/aws-serverless 105.52 KB
@​sentry/cloudflare (withSentry) - minified 166.63 KB
@​sentry/cloudflare (withSentry) 420.32 KB

v10.53.0

Compare Source

Important Changes
  • feat(core): Add streamGenAiSpans options to stream gen_ai spans (#​20785)

    Adds a new streamGenAiSpans option that controls how gen_ai spans are
    sent to Sentry. When set, the SDK extracts all gen_ai spans out of a
    transaction and sends them as v2 envelope items.

    Enable this option if gen_ai spans are being dropped because the transaction payload exceeds size limits.

    Sentry.init({
      dsn: 'https://examplePublicKey@o0.ingest.sentry.io/0',
      streamGenAiSpans: true,
    });
Other Changes
  • feat(browser): Migrate browser profiling thread data to span attributes (#​20800)
  • feat(core): Add addConsoleInstrumentationFilter utility (#​20790)
  • feat(core): Add applicationKey to BuildTimeOptionsBase (#​20789)
  • feat(core): split exports by browser/server for bundle size (#​20435)
  • feat(nextjs): Add top-level applicationKey option (#​20794)
  • feat(node): Support Node 26 (#​20710)
  • feat(profiling-node): Bump @sentry-internal/node-cpu-profiler to 2.4.0 (#​20720)
  • fix(cloudflare): avoid flush lock self-wait (#​20719)
  • fix(hono): Capture transaction name on request for correct culprit (#​20801)
  • fix(mcp): retroactively wrap handlers registered before wrapMcpServerWithSentry (#​20699)
  • fix(node-core): Guard against undefined util.getSystemErrorMap (#​20660)
  • fix(replay): Capture aborted/errored fetch requests in replay network tab (#​20722)
Internal Changes
  • chore: bump replay dependencies (#​20746)
  • chore: Typo intergation -> integration (#​20799)
  • chore(deps): Bump @​babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.4 (#​20773)
  • chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#​20818)
  • chore(deps): Bump next from 16.2.4 to 16.2.6 in /dev-packages/e2e-tests/test-applications/nextjs-16-streaming (#​20811)
  • chore(deps): Bump rollup from 4.59.0 to 4.60.3 (#​20716)
  • ci: Ensure PR reminder workflow considers new sub teams (#​20814)
  • ci: Remove codecov reporting (#​20803)
  • feat(deps): Bump bundler plugins to 5.3.0 (#​20820)
  • feat(deps): Bump fast-uri from 3.0.6 to 3.1.2 (#​20774)
  • feat(deps): Bump hono from 4.12.16 to 4.12.18 (#​20777)
  • test(cloudflare-hono): fix 'occured' -> 'occurred' typo in error log (#​20783)
  • test(deps): Bump hono from 4.12.14 to 4.12.16 (#​20712)
  • test(deps): Bump hono from 4.12.14 to 4.12.18 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#​20776)
  • test(e2e): Pin astro version in astro-6 test app (#​20709)

Work in this release was contributed by @​dmmulroy and @​SAY-5. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 26.22 KB
@​sentry/browser - with treeshaking flags 24.69 KB
@​sentry/browser (incl. Tracing) 43.69 KB
@​sentry/browser (incl. Tracing + Span Streaming) 45.63 KB
@​sentry/browser (incl. Tracing, Profiling) 48.56 KB
@​sentry/browser (incl. Tracing, Replay) 82.4 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 72.08 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 86.99 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 99.33 KB
@​sentry/browser (incl. Feedback) 43 KB
@​sentry/browser (incl. sendFeedback) 30.92 KB
@​sentry/browser (incl. FeedbackAsync) 35.91 KB
@​sentry/browser (incl. Metrics) 27.27 KB
@​sentry/browser (incl. Logs) 27.42 KB
@​sentry/browser (incl. Metrics & Logs) 28.08 KB
@​sentry/react 27.92 KB
@​sentry/react (incl. Tracing) 45.91 KB
@​sentry/vue 31.01 KB
@​sentry/vue (incl. Tracing) 45.5 KB
@​sentry/svelte 26.24 KB
CDN Bundle 28.55 KB
CDN Bundle (incl. Tracing) 46.05 KB
CDN Bundle (incl. Logs, Metrics) 29.89 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 47.15 KB
CDN Bundle (incl. Replay, Logs, Metrics) 68.3 KB
CDN Bundle (incl. Tracing, Replay) 82.57 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 83.62 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 88.24 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 89.32 KB
CDN Bundle - uncompressed 83.97 KB
CDN Bundle (incl. Tracing) - uncompressed 138.15 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 88.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 141.53 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 209.97 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 254.08 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 257.44 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 267.46 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 270.81 KB
@​sentry/nextjs (client) 48.36 KB
@​sentry/sveltekit (client) 44.17 KB
@​sentry/node-core 59.4 KB
@​sentry/node 162.08 KB
@​sentry/node - without tracing 72.22 KB
@​sentry/aws-serverless 105.53 KB
@​sentry/cloudflare (withSentry) - minified 166.66 KB
@​sentry/cloudflare (withSentry) 420.38 KB

v10.52.0

Compare Source

Important Changes
  • Beta release of the official Hono Sentry SDK

    This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the
    Sentry Hono SDK docs. Please reach out on
    GitHub if you have any feedback or concerns.

  • feat(browser): Add ingest_settings to v2 log envelope payload (#​20453)

    Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes
  • docs(hono): Add new docs link and move to BETA release (#​20666)
  • feat(browser): Add ingest_settings to v2 metrics envelope payload (#​20454)
  • feat(browser): Migrate spotlight event processor to ignoreSpans (#​20595)
  • feat(cloudflare): Capture request body via httpServerIntegration (#​20614)
  • feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#​20523)
  • feat(cloudflare): Support tracing for queue producer (#​20529)
  • feat(core): Apply request data to segment spans in span streaming (#​20654)
  • feat(core): Migrate Vercel AI event processor to span streaming (#​20608)
  • feat(deno): Add processSegmentSpan to Deno context integration (#​20613)
  • feat(http): Portable node:http client instrumentation (#​20393)
  • feat(nitro): Add unstorage tracing channel instrumentation (#​20615)
  • feat(node-core): Add processSegmentSpan to node context integration (#​20678)
  • feat(node): Use diagnostics_channel for redis >= 5.12.0 (#​20573)
  • feat(node): Vendor ioredis, redis instrumentations (#​20510)
  • feat(replay): Reset replay id from DSC on session expiry/refresh (#​20129)
  • fix: Bump fast-xml-parser to fix vulnerability (#​20644)
  • fix: Bump vite versions to fix vulnerability (#​20646)
  • fix(core): Drain buffers in flush() when there is no transport (#​20207)
  • fix(core): Guard against undefined chained in copyProps (#​20637)
  • fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#​20636)
  • fix(deps): Bump transitive deps for medium security fixes (#​20683)
  • fix(hono): Do not capture 3xx and 4xx errors and add tests (#​20640)
  • fix(nextjs): Skip build modification when SRI is enabled (#​20694)
  • fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#​20509)
Internal Changes
  • chore: Remove bundle-analyzer-scenarios dev packages (#​20680)
  • chore(deps): Bump @​hono/node-server from 1.19.10 to 1.19.13 (#​20117)
  • chore(deps): Bump @​nestjs packages to fix path-to-regexp ReDoS (#​20642)
  • chore(deps): Bump axios from 1.15.0 to 1.15.2 (#​20665)
  • chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#​20695)
  • chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#​20696)
  • chore(deps): Bump vulnerable testem version (#​20634)
  • ci(deps): Bump actions/checkout from 4 to 6 (#​20620)
  • ci(deps): Bump actions/create-github-app-token from 2 to 3 (#​20079)
  • ci(deps): Bump denoland/setup-deno from 2.0.3 to 2.0.4 (#​20080)
  • ci(deps): Bump getsentry/craft from 2.24.1 to 2.26.2 (#​20621)
  • feat(deps): Bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#​20457)
  • feat(deps): Bump follow-redirects from 1.15.11 to 1.16.0 (#​20267)
  • feat(deps): Bump hono from 4.12.12 to 4.12.14 (#​20340)
  • fix(tests): Use stable instrumentations api in rr tests (#​20690)
  • ref(tests): Rename streamed http.client span test folders (#​20602)
  • test(browser): Fix browserTracingIntegration unit test (#​20604)
  • test(browser): Fix flaky browser integration test for profiles (#​20587)
  • test(browser): Fix flaky loader test (#​20596)
  • test(browser): Fix flaky loader test (#​20655)
  • test(browser): Make browser profiling test less flaky (#​20664)
  • test(cloudflare): Add e2e test for MCPAgent with DurableObject instrumentation (#​20601)
  • test(cloudflare): Add integration tests for scheduled, D1, and workflow (#​20609)
  • test(cloudflare): Reduce flakiness for cloudflare with sub workers (#​20632)
  • test(cloudflare): Use Node v24 for Cloudflare e2e tests (#​20628)
  • test(deps): Bump Next.js in E2E test apps to fix Server Components DoS (#​20633)
  • test(e2e): Add node-express-streaming E2E test app (#​20684)
  • test(e2e): Add span streaming test app for Cloudflare Workers (#​20681)
  • test(e2e): Add span streaming test app for next 16 (#​20648)
  • test(e2e): Add span streaming test app for React Router 7 SPA (#​20677)
  • test(e2e): Remove remaining npmrc pointing to Verdaccio (#​20611)
  • test(nextjs): Fix flaky node runtime metrics E2E tests (#​20624)
  • test(node): Fix ANR test for flakiness (#​20656)
  • test(node): Fix flaky node cron test (#​20661)
  • test(node): Unflake mongodb test (#​20662)
  • test(react-router): Fix flaky E2E tests (#​20630)
  • test(test-utils): Add MemoryProfiler for heap snapshot testing via CDP (#​20555)

Work in this release was contributed by @​sbs44. Thank you for your contribution!

Bundle size 📦
Path Size
@​sentry/browser 25.68 KB
@​sentry/browser - with treeshaking flags 24.2 KB
@​sentry/browser (incl. Tracing) 43.13 KB
@​sentry/browser (incl. Tracing + Span Streaming) 45.3 KB
@​sentry/browser (incl. Tracing, Profiling) 47.99 KB
@​sentry/browser (incl. Tracing, Replay) 81.67 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 71.37 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 86.25 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 98.57 KB
@​sentry/browser (incl. Feedback) 42.42 KB
@​sentry/browser (incl. sendFeedback) 30.38 KB
@​sentry/browser (incl. FeedbackAsync) 35.35 KB
@​sentry/browser (incl. Metrics) 26.95 KB
@​sentry/browser (incl. Logs) 27.08 KB
@​sentry/browser (incl. Metrics & Logs) 27.76 KB
@​sentry/react 27.38 KB
@​sentry/react (incl. Tracing) 45.31 KB
@​sentry/vue 30.45 KB
@​sentry/vue (incl. Tracing) 44.94 KB
@​sentry/svelte 25.7 KB
CDN Bundle 28.23 KB
CDN Bundle (incl. Tracing) 45.83 KB
CDN Bundle (incl. Logs, Metrics) 29.62 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 46.91 KB
CDN Bundle (incl. Replay, Logs, Metrics) 67.84 KB
CDN Bundle (incl. Tracing, Replay) 82.15 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 83.2 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 87.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 88.89 KB
CDN Bundle - uncompressed 82.89 KB
CDN Bundle (incl. Tracing) - uncompressed 137.15 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 86.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 140.53 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 208.3 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 252.48 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 255.85 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 265.86 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 269.22 KB
@​sentry/nextjs (client) 47.75 KB
@​sentry/sveltekit (client) 43.6 KB
@​sentry/node-core 59.05 KB
@​sentry/node 161.63 KB
@​sentry/node - without tracing 71.76 KB
@​sentry/aws-serverless 105.11 KB
@​sentry/cloudflare (withSentry) - minified 165.38 KB
@​sentry/cloudflare (withSentry) 417.48 KB
vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.6

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

v6.3.0

Compare Source

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:
Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

oxc-project/oxc (oxfmt)

v0.49.0

Compare Source

🚀 Features
oxc-project/oxc (oxlint)

v1.64.0

Compare Source

🚀 Features
🐛 Bug Fixes
pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

  • Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

    A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

  • Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx
antfu-collective/taze (taze)

v19.12.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
rolldown/tsdown (tsdown)

v0.22.0

Compare Source

   🚨 Breaking Changes
  • Drop Node.js < 22.18.0 support, make unrun optional, add tsx config loader  -  by @​sxzz (a1042)
  • dts: Auto-enable dts when tsconfig declaration is true  -  by @​sxzz in #​872 (085f0)
  • publint: Use pkg from publint results, require publint v0.3.8+  -  by @​sxzz (413bb)
   🚀 Features
   🐞 Bug Fixes

🔄 Migration Guide

Node.js version

Upgrade to Node.js 22.18.0 or later. Bun and Deno remain supported (experimental).

unrun is no longer bundled

If your environment relies on the unrun config loader (i.e. you're on a Node version without native TypeScript support and use the default auto loader), install it manually:

npm i -D unrun

# or, alternatively, the new tsx loader:
npm i -D tsx

If you use Node.js 22.18.0+ with native TypeScript support, no change is needed — the auto loader will pick native.

dts auto-enabled from tsconfig

If your tsconfig.json has compilerOptions.declaration: true but you do not want tsdown to emit .d.ts files, opt out explicitly:

// tsdown.config.ts
export default defineConfig({
  dts: false,
})
exports.bin auto-detection

Any entry chunk containing a shebang (e.g. #!/usr/bin/env node) now causes tsdown to write a bin field in package.json automatically. The semantics differ slightly from explicit bin: true:

Value Single shebang Multiple shebangs No shebangs
(unset) Auto-set bin Warn, skip Silent
true Auto-set bin Throw Warn
false No bin No bin No bin

To opt out entirely:

export default defineConfig({
  exports: { bin: false },
})
Links

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 12pm on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from RedStar071 as a code owner May 10, 2026 01:40
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 9a0521b to e6213c0 Compare May 14, 2026 18:30
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from e6213c0 to c1bc5cb Compare May 15, 2026 04:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants