chore(deps): update all minor and patch dependencies by renovate[bot] · Pull Request #327 · DanBot-Hosting/Discord-Bot

renovate · 2026-06-09T12:07:00Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/node (source)	`^10.56.0` → `^10.58.0`
@sentry/types (source)	`^10.56.0` → `^10.58.0`
@types/node (source)	`^25.9.2` → `^25.9.3`
axios (source)	`^1.17.0` → `^1.18.0`
mongoose (source)	`^9.6.3` → `^9.7.0`

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v10.58.0`

Compare Source

Important Changes

feat(hono): Add support for the Deno runtime (#21450)

@sentry/hono now supports the Deno runtime via a new @sentry/hono/deno entry point.
Install @sentry/deno as a peer dependency and initialize Sentry through the sentry() middleware:

import { Hono } from 'hono';
import { sentry } from '@&#8203;sentry/hono/deno';

const app = new Hono();

app.use(
  sentry(app, {
    dsn: '__DSN__', // or Deno.env.get('SENTRY_DSN')
    tracesSampleRate: 1.0,
  }),
);

Deno.serve(app.fetch);

feat(core): Extract objects as structured logs in consoleLoggingIntegration (#21385)

The consoleLoggingIntegration now extracts structured log attributes when the first argument is a plain object.

// Object keys become log attributes
console.log({ userId: 123, action: 'login' }, 'User logged in');
// → attributes: { userId: 123, action: "login" }

// Non-object first args use template + parameters (unchanged)
console.log('Hello', 'world', 123);
// → sentry.message.template: "Hello {} {}"

feat(react-router): Stabilize the instrumentation API (#21470)

React Router's instrumentation API is now stable — the @experimental markers have been removed from createSentryServerInstrumentation, createSentryClientInstrumentation, and the related helpers and types.
The manual server wrappers wrapServerLoader and wrapServerAction are now deprecated in favor of it. Export instrumentations = [Sentry.createSentryServerInstrumentation()] from your entry.server.tsx to instrument all loaders and actions without wrapping them individually.

Other Changes

feat(hono): Add HTTP connection info to server spans (#21408)
feat(node-core): Attach log message and fields to pino error events (#21422)
feat(react-router): Always build client instrumentation and deprecate useInstrumentationAPI (#21432)
feat(react-router): Rename client navigation roots from the route pattern (#21463)
fix(astro): Resolve middleware export types (#21414)
fix(browser): Ignore __sentry_wrapped__ inherited from Function.prototype (#21506)
fix(core): Avoid double counting cached input tokens for Vercel AI SDK v6 (#21488)
fix(core): Keep safeJoin side-effect-free for DOM elements (#21356)
fix(deno): Use correct paths for module and types fields in package.json (#21449)
fix(nextjs): Mark redirect server actions as ok instead of internal_error (#21521)
fix(react-router): Mark instrumentation API active on invocation (#21420)
fix(redis): Bring span attributes into alignment with conventions
fix(sveltekit): Add default exports condition (#21472)
fix(tanstackstart-react): Preserve middleware context types (#21441)
perf(core): Reuse unchanged Vercel AI messages JSON

Work in this release was contributed by @archievi, @AyaanFaisal21, @itosa-kazu, and @bkchr. Thank you for your contributions!

Internal Changes

chore: Pin OTel to <2.8.0 in ts 3.8 test app (#21474)
chore(ci): Add dependabot auto-triage pipeline (#21318)
chore(dependabot): Group react-router packages to bump in unison (#21442)
chore(deps-dev): Bump the react-router group across 1 directory with 3 updates (#21448)
chore(deps): Bump @hapi/content from 6.0.1 to 6.0.2 (#21180)
chore(deps): Bump getsentry/craft from 2.26.2 to 2.26.9 (#21444)
chore(deps): Bump hono from 4.12.18 to 4.12.21 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#21340)
chore(deps): Bump nx to 22.7.5 (#21527)
chore(deps): Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#21302)
chore(size-limit): weekly auto-bump (#21501)
ci(dependabot-triage): Add outcome step (#21507)
ci(deps): Bump actions/github-script from 7 to 9 (#21300)
ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.142 (#21445)
feat(deps): Bump shell-quote from 1.8.3 to 1.8.4 (#21412)
feat(deps): Bump the remix group with 4 updates (#21447)
feat(nestjs): Migrate vendored nest instrumentation to Sentry APIs (#21516)
ref: Remove unused SENTRY_BUILD_PRESERVE_MODULES env check from rollup configs (#21487)
ref: Rename published internal packages (#21371)
ref(nestjs): Streamline nestjs-core (#21434)
ref(node): Drop eslint-ignores and oxlint exemption in generic-pool instrumentation (#21435)
ref(node): Migrate vendored generic-pool instrumentation to Sentry APIs (#21523)
ref(node): Streamline dataloader instrumentation (#21475)
ref(node): Streamline generic-pool (#21363)
test: Skip nuxt-5 E2E test (#21524)
test(astro): Add Astro 7 e2e app (#21471)
test(node): Remove generic-pool fake unit test (#21439)
test(node): Replace lru-memoizer fake unit test with integration coverage (#21437)
test(react-router): Add Redis-backed DB-span coverage to rr7 (#21398)
test(react-router): Finalize instrumentation api e2e coverage (#21468)
test(react-router): Fix e2e tests (#21485)
test(react-router): Verify client fetch instrumentation hook fires (#21402)
test(tanstackstart-react): Initialize Sentry from a dedicated client init file (#21397)

Bundle size 📦

Path	Size
@sentry/browser	26.76 KB
@sentry/browser - with treeshaking flags	25.23 KB
@sentry/browser (incl. Tracing)	44.63 KB
@sentry/browser (incl. Tracing + Span Streaming)	46.82 KB
@sentry/browser (incl. Tracing, Profiling)	49.32 KB
@sentry/browser (incl. Tracing, Replay)	82.93 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	72.78 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	87.51 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	99.9 KB
@sentry/browser (incl. Feedback)	43.52 KB
@sentry/browser (incl. sendFeedback)	31.45 KB
@sentry/browser (incl. FeedbackAsync)	36.44 KB
@sentry/browser (incl. Metrics)	27.8 KB
@sentry/browser (incl. Logs)	28.03 KB
@sentry/browser (incl. Metrics & Logs)	28.71 KB
@sentry/react	28.51 KB
@sentry/react (incl. Tracing)	46.88 KB
@sentry/vue	31.66 KB
@sentry/vue (incl. Tracing)	46.48 KB
@sentry/svelte	26.78 KB
CDN Bundle	29.09 KB
CDN Bundle (incl. Tracing)	47.07 KB
CDN Bundle (incl. Logs, Metrics)	30.6 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.33 KB
CDN Bundle (incl. Replay, Logs, Metrics)	68.97 KB
CDN Bundle (incl. Tracing, Replay)	83.52 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.74 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.23 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.45 KB
CDN Bundle - uncompressed	86.51 KB
CDN Bundle (incl. Tracing) - uncompressed	142.38 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	91.11 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	146.26 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	213 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	258.46 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	262.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	275.7 KB
@sentry/nextjs (client)	49.27 KB
@sentry/sveltekit (client)	45.04 KB
@sentry/core/server	74.29 KB
@sentry/core/browser	61.74 KB
@sentry/node-core	60.28 KB
@sentry/node	127.39 KB
@sentry/node - without tracing	72.37 KB
@sentry/aws-serverless	84.26 KB
@sentry/cloudflare (withSentry) - minified	169.62 KB
@sentry/cloudflare (withSentry)	423.68 KB

`v10.57.0`

Compare Source

Important Changes

feat(angular): Add support for Angular 22 (#21330)

@sentry/angular now officially supports Angular 22.
ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data.
sendDefaultPii: true still works and maps to enabling all dataCollection categories.
dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default.
Data you set explicitly (like via Sentry.setUser()) is always sent regardless.
When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:
```
Sentry.init({
  dataCollection: {
    userInfo: false,
    genAI: { inputs: false, outputs: false },
    httpBodies: [],
    httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
  },
});
```

Other Changes

feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
feat(cloudflare): Auto instrument D1 based on env (#21276)
feat(core): Change default of dataCollection.userInfo to true (#21348)
feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
feat(hono): Filter noisy transactions (favicon etc) (#21365)
fix(cloudflare): Don't track negatively sampled spans (#21367)
fix(core): Use safeDateNow calls for new Date() reads (#21351)
fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
fix(react): Remove unused react.componentStack event context (#21183)
fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)

Internal Changes

chore: Bump volta node version from 20.19.2 to 20.19.5 (#21359)
chore: Remove git:* allowed permissions (#21328)
chore(deps-dev): Bump eslint-plugin-regexp from 1.15.0 to 3.1.0 (#21104)
chore(deps-dev): Bump react-router from 7.13.0 to 7.15.0 (#21337)
chore(size-limit): weekly auto-bump (#21344)
docs(remix): Add notice about capturing http bodies for form data keys (#21296)
feat(deps): Bump @types/aws-lambda from 8.10.150 to 8.10.161 (#21105)
feat(deps): Bump axios from 1.15.2 to 1.16.0 (#21251)
feat(deps): Bump hono from 4.12.18 to 4.12.21 (#21341)
ref(browser): Split web vitals integration (#21210)
ref(node): Streamline lru-memoizer instrumentation (#21350)
ref(node): Streamline sql-common (#21360)
test(e2e): Migrate sendDefaultPii to dataCollection option (#21288)
test(nextjs): Remove assertion on conditional span (#21329)
test(node): Move node integration tests to data collection (#21283)

Work in this release was contributed by @zhongrenfei1-hub. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	26.57 KB
@sentry/browser - with treeshaking flags	25.05 KB
@sentry/browser (incl. Tracing)	44.44 KB
@sentry/browser (incl. Tracing + Span Streaming)	46.62 KB
@sentry/browser (incl. Tracing, Profiling)	49.11 KB
@sentry/browser (incl. Tracing, Replay)	82.73 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	72.6 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	87.31 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	99.71 KB
@sentry/browser (incl. Feedback)	43.33 KB
@sentry/browser (incl. sendFeedback)	31.28 KB
@sentry/browser (incl. FeedbackAsync)	36.25 KB
@sentry/browser (incl. Metrics)	27.62 KB
@sentry/browser (incl. Logs)	27.86 KB
@sentry/browser (incl. Metrics & Logs)	28.54 KB
@sentry/react	28.34 KB
@sentry/react (incl. Tracing)	46.66 KB
@sentry/vue	31.47 KB
@sentry/vue (incl. Tracing)	46.29 KB
@sentry/svelte	26.6 KB
CDN Bundle	28.89 KB
CDN Bundle (incl. Tracing)	46.83 KB
CDN Bundle (incl. Logs, Metrics)	30.36 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.05 KB
CDN Bundle (incl. Replay, Logs, Metrics)	68.72 KB
CDN Bundle (incl. Tracing, Replay)	83.34 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.49 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.02 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.18 KB
CDN Bundle - uncompressed	85.72 KB
CDN Bundle (incl. Tracing) - uncompressed	141.58 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	90.1 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	145.25 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	211.99 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	257.67 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	261.32 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	274.69 KB
@sentry/nextjs (client)	49.08 KB
@sentry/sveltekit (client)	44.85 KB
@sentry/core/server	74.18 KB
@sentry/core/browser	61.62 KB
@sentry/node-core	60.28 KB
@sentry/node	127.37 KB
@sentry/node - without tracing	72.37 KB
@sentry/aws-serverless	84.26 KB
@sentry/cloudflare (withSentry) - minified	169.62 KB
@sentry/cloudflare (withSentry)	423.68 KB

axios/axios (axios)

`v1.18.0`

Compare Source

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)
URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)
Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)
Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@drori12 (#10984)
@eyupcanakman (#10899)
@Adi-Beker (#10995)

Full Changelog

Automattic/mongoose (mongoose)

`v9.7.0`

Compare Source

==================

feat: add Node.js TracingChannel support for APM instrumentation #16275 #16105 logaretm
feat(model): add standard schema adapter for models #16308 #16280
fix(cursor): avoid waiting on buffering to run aggregation middleware #16289 #16284
fix(document): throw error if overwriting array selected with $slice #16313 #2432
fix(schema): remove validateSync() union fallback #16310 #16291 AbdelrahmanHafez
types: cast primitive types within unions when applying create casting #16320 #16316
docs: add llms.txt #16312 #15687
docs: rewrite documents docs #16298
docs(model): clarify some details on model.validate() casting #16308 #16280
docs(findOneAndUpdate): clarify update handling of undefined #16299
docs(model): fix link to be absolute #16321 hasezoey

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/all-minor-patch branch from eedf7bf to b4580c9 Compare June 9, 2026 19:56

renovate Bot changed the title ~~chore(deps): update all minor and patch dependencies to ^10.57.0~~ chore(deps): update all minor and patch dependencies Jun 9, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from e51f4b6 to 8b65caa Compare June 14, 2026 21:39

chore(deps): update all minor and patch dependencies

a233024

renovate Bot force-pushed the renovate/all-minor-patch branch from 8b65caa to a233024 Compare June 15, 2026 21:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all minor and patch dependencies#327

chore(deps): update all minor and patch dependencies#327
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.58.0

Important Changes

Other Changes

Bundle size 📦

v10.57.0

Important Changes

Other Changes

Bundle size 📦

v1.18.0

v1.18.0 — June 13, 2026

🔒 Security Fixes

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v9.7.0

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 9, 2026 •

edited

Loading

`v10.58.0`

`v10.57.0`

`v1.18.0`

`v9.7.0`