Skip to content

build(deps): bump the npm-dependencies group across 1 directory with 22 updates - #168

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-f6e3dc1789
Open

build(deps): bump the npm-dependencies group across 1 directory with 22 updates#168
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-f6e3dc1789

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 22 updates in the / directory:

Package From To
@typescript-eslint/eslint-plugin 8.72.0 8.72.1
@typescript-eslint/parser 8.72.0 8.72.1
@opentelemetry/exporter-trace-otlp-http 0.300.0 0.301.0
@opentelemetry/instrumentation-express 0.72.0 0.73.0
@opentelemetry/instrumentation-http 0.300.0 0.301.0
@opentelemetry/instrumentation-undici 0.34.0 0.35.0
@opentelemetry/sdk-node 0.217.0 0.301.0
@opentelemetry/semantic-conventions 1.43.0 1.44.0
@sentry/node 10.76.2 10.78.0
@supabase/supabase-js 2.118.0 2.119.0
@x402/core 2.28.0 2.30.0
@x402/express 2.28.0 2.30.0
@x402/fetch 2.28.0 2.30.0
@x402/stellar 2.28.0 2.30.0
express-rate-limit 8.7.1 8.7.3
@sentry/react 10.76.2 10.78.0
i18next 26.5.6 26.7.2
react-i18next 17.1.3 17.1.13
autoprefixer 10.6.1 10.6.2
postcss 8.5.31 8.5.32
rollup-plugin-visualizer 7.1.1 7.1.2
@modelcontextprotocol/sdk 1.32.1 1.32.2

Updates @typescript-eslint/eslint-plugin from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • c49d287 chore: [ci] test on oldest supported TS version (#13024)
  • 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @opentelemetry/exporter-trace-otlp-http from 0.300.0 to 0.301.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.301.0

0.301.0

💥 Breaking Changes

  • feat(sdk-node)!: The experimental startNodeSdk() code path for environment-based config (i.e. when not using a config file), has full option coverage. #6999 @​trentm
    • startNodeSdk() should now be a viable replacement for new NodeSDK(), supporting similar (but not exactly the same) options for configuring most SDK components.
    • startNodeSDK() has been deprecated, use startNodeSdk() (slight capitalization change).
    • Two resource detectors have been added to the default set for new NodeSDK() users: os and serviceinstance. This means that when not specifying OTEL_NODE_RESOURCE_DETECTORS, the SDK Resource will include os.* and service.instance.id attributes.
  • refactor(configuration)!: The responsibility of the configuration package has been reduced to just the parsing, validation, and TypeScript types for declarative config files. #6999 @​trentm
    • Breaking: The configuration package no longer supports creating a synthetic ConfigurationModel from environment variables.
    • Breaking: The configuration package API has changed: createConfigFactory() has been replaced with `parseConfigFile().

🐛 Bug Fixes

  • fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (#7261) @​avens19
  • fix(otlp-grpc-exporter-base): avoid an incomplete mTLS warning for root-CA-only TLS configuration (#7235) @​LarryHu0217
  • fix(sdk-node): warn and skip, instead of erroring, on an unknown resource detector name in declarative config #7252 @​trentm
  • fix(sdk-node): use OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT and OTEL_LINK_ATTRIBUTE_COUNT_LIMIT environment variables for span limits #6999 @​trentm
    • Before this change, different environment variable names (see next point), that are not in the OTel spec were used. They will still be supported as a fallback for the spec names for a period of approximately six months.
    • The OTEL_SPAN_ATTRIBUTE_PER_EVENT_COUNT_LIMIT and OTEL_SPAN_ATTRIBUTE_PER_LINK_COUNT_LIMIT environment variables are deprecated. Support for them will be removed sometime after six months, to allow transition to the correct environment variables in the spec.
  • fix(otlp-exporter-base): pick the browser fetch mode from the document origin, so exports from an opaque-origin document (e.g. a sandboxed iframe) no longer fail with mode: 'same-origin' #7211 @​MO2k4
  • fix: raise the minimum @opentelemetry/api peer dependency version to 1.10.0 for packages that depend on @opentelemetry/core, @opentelemetry/otlp-transformer or @opentelemetry/instrumentation, as these use API 1.10 features. (#7258) @​volodymyrshk @​pichlermarc
    • Combining these packages with @opentelemetry/api 1.9.x never worked: they failed at runtime. The peer dependency now makes npm report this at install time instead.
    • If you see a peer dependency error after upgrading, update @opentelemetry/api to 1.10.0 or later.

📚 Documentation

  • docs(exporters): update dead semantic conventions resource specification links in OTLP exporters #7254 @​helmipradita
Commits
  • 9985264 chore: prepare next release (#7272)
  • 7983f1c fix: raise @​opentelemetry/api peer floor to 1.10.0 where needed (#7259)
  • 0a5c4ed chore(deps): update dependency lerna to v10.1.1 (#7270)
  • 4eda691 fix(propagator-b3): reject invalid trace id lengths (#7262)
  • 5ca48a7 fix(context-zone): declare the @​opentelemetry/api peer dependency (#7268)
  • babaf15 docs(migration): note that API 1.10.0 needs SDK 3.x (#7253)
  • daae704 fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (...
  • cc2a315 fix(otlp-grpc-exporter-base): avoid false mTLS configuration warnings (#7241)
  • 29eec06 fix(sdk-node): warn and skip, instead of erroring, on an unknown resource det...
  • 4667c0a docs: update dead semantic conventions resource specification links (#7254)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-express from 0.72.0 to 0.73.0

Release notes

Sourced from @​opentelemetry/instrumentation-express's releases.

instrumentation-redis: v0.73.0

0.73.0 (2026-11-05)

Features

  • deps: update deps matching '@opentelemetry/*' (#3884) (a869573)

Bug Fixes

  • align peer-api range with package dependency peer-api ranges (#3883) (7401ffa)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.71.0 to ^0.72.0
Changelog

Sourced from @​opentelemetry/instrumentation-express's changelog.

0.73.0 (2026-11-05)

Features

  • deps: update deps matching '@opentelemetry/*' (#3884) (a869573)

Bug Fixes

  • align peer-api range with package dependency peer-api ranges (#3883) (7401ffa)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/contrib-test-utils bumped from ^0.71.0 to ^0.72.0
Commits

Updates @opentelemetry/instrumentation-http from 0.300.0 to 0.301.0

Release notes

Sourced from @​opentelemetry/instrumentation-http's releases.

experimental/v0.301.0

0.301.0

💥 Breaking Changes

  • feat(sdk-node)!: The experimental startNodeSdk() code path for environment-based config (i.e. when not using a config file), has full option coverage. #6999 @​trentm
    • startNodeSdk() should now be a viable replacement for new NodeSDK(), supporting similar (but not exactly the same) options for configuring most SDK components.
    • startNodeSDK() has been deprecated, use startNodeSdk() (slight capitalization change).
    • Two resource detectors have been added to the default set for new NodeSDK() users: os and serviceinstance. This means that when not specifying OTEL_NODE_RESOURCE_DETECTORS, the SDK Resource will include os.* and service.instance.id attributes.
  • refactor(configuration)!: The responsibility of the configuration package has been reduced to just the parsing, validation, and TypeScript types for declarative config files. #6999 @​trentm
    • Breaking: The configuration package no longer supports creating a synthetic ConfigurationModel from environment variables.
    • Breaking: The configuration package API has changed: createConfigFactory() has been replaced with `parseConfigFile().

🐛 Bug Fixes

  • fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (#7261) @​avens19
  • fix(otlp-grpc-exporter-base): avoid an incomplete mTLS warning for root-CA-only TLS configuration (#7235) @​LarryHu0217
  • fix(sdk-node): warn and skip, instead of erroring, on an unknown resource detector name in declarative config #7252 @​trentm
  • fix(sdk-node): use OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT and OTEL_LINK_ATTRIBUTE_COUNT_LIMIT environment variables for span limits #6999 @​trentm
    • Before this change, different environment variable names (see next point), that are not in the OTel spec were used. They will still be supported as a fallback for the spec names for a period of approximately six months.
    • The OTEL_SPAN_ATTRIBUTE_PER_EVENT_COUNT_LIMIT and OTEL_SPAN_ATTRIBUTE_PER_LINK_COUNT_LIMIT environment variables are deprecated. Support for them will be removed sometime after six months, to allow transition to the correct environment variables in the spec.
  • fix(otlp-exporter-base): pick the browser fetch mode from the document origin, so exports from an opaque-origin document (e.g. a sandboxed iframe) no longer fail with mode: 'same-origin' #7211 @​MO2k4
  • fix: raise the minimum @opentelemetry/api peer dependency version to 1.10.0 for packages that depend on @opentelemetry/core, @opentelemetry/otlp-transformer or @opentelemetry/instrumentation, as these use API 1.10 features. (#7258) @​volodymyrshk @​pichlermarc
    • Combining these packages with @opentelemetry/api 1.9.x never worked: they failed at runtime. The peer dependency now makes npm report this at install time instead.
    • If you see a peer dependency error after upgrading, update @opentelemetry/api to 1.10.0 or later.

📚 Documentation

  • docs(exporters): update dead semantic conventions resource specification links in OTLP exporters #7254 @​helmipradita
Commits
  • 9985264 chore: prepare next release (#7272)
  • 7983f1c fix: raise @​opentelemetry/api peer floor to 1.10.0 where needed (#7259)
  • 0a5c4ed chore(deps): update dependency lerna to v10.1.1 (#7270)
  • 4eda691 fix(propagator-b3): reject invalid trace id lengths (#7262)
  • 5ca48a7 fix(context-zone): declare the @​opentelemetry/api peer dependency (#7268)
  • babaf15 docs(migration): note that API 1.10.0 needs SDK 3.x (#7253)
  • daae704 fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (...
  • cc2a315 fix(otlp-grpc-exporter-base): avoid false mTLS configuration warnings (#7241)
  • 29eec06 fix(sdk-node): warn and skip, instead of erroring, on an unknown resource det...
  • 4667c0a docs: update dead semantic conventions resource specification links (#7254)
  • Additional commits viewable in compare view

Updates @opentelemetry/instrumentation-undici from 0.34.0 to 0.35.0

Release notes

Sourced from @​opentelemetry/instrumentation-undici's releases.

instrumentation-undici: v0.35.0

0.35.0 (2026-11-05)

Features

  • deps: update deps matching '@opentelemetry/*' (#3884) (a869573)

Bug Fixes

  • align peer-api range with package dependency peer-api ranges (#3883) (7401ffa)
Changelog

Sourced from @​opentelemetry/instrumentation-undici's changelog.

0.35.0 (2026-11-05)

Features

  • deps: update deps matching '@opentelemetry/*' (#3884) (a869573)

Bug Fixes

  • align peer-api range with package dependency peer-api ranges (#3883) (7401ffa)
Commits

Updates @opentelemetry/sdk-node from 0.217.0 to 0.301.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.301.0

0.301.0

💥 Breaking Changes

  • feat(sdk-node)!: The experimental startNodeSdk() code path for environment-based config (i.e. when not using a config file), has full option coverage. #6999 @​trentm
    • startNodeSdk() should now be a viable replacement for new NodeSDK(), supporting similar (but not exactly the same) options for configuring most SDK components.
    • startNodeSDK() has been deprecated, use startNodeSdk() (slight capitalization change).
    • Two resource detectors have been added to the default set for new NodeSDK() users: os and serviceinstance. This means that when not specifying OTEL_NODE_RESOURCE_DETECTORS, the SDK Resource will include os.* and service.instance.id attributes.
  • refactor(configuration)!: The responsibility of the configuration package has been reduced to just the parsing, validation, and TypeScript types for declarative config files. #6999 @​trentm
    • Breaking: The configuration package no longer supports creating a synthetic ConfigurationModel from environment variables.
    • Breaking: The configuration package API has changed: createConfigFactory() has been replaced with `parseConfigFile().

🐛 Bug Fixes

  • fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (#7261) @​avens19
  • fix(otlp-grpc-exporter-base): avoid an incomplete mTLS warning for root-CA-only TLS configuration (#7235) @​LarryHu0217
  • fix(sdk-node): warn and skip, instead of erroring, on an unknown resource detector name in declarative config #7252 @​trentm
  • fix(sdk-node): use OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT and OTEL_LINK_ATTRIBUTE_COUNT_LIMIT environment variables for span limits #6999 @​trentm
    • Before this change, different environment variable names (see next point), that are not in the OTel spec were used. They will still be supported as a fallback for the spec names for a period of approximately six months.
    • The OTEL_SPAN_ATTRIBUTE_PER_EVENT_COUNT_LIMIT and OTEL_SPAN_ATTRIBUTE_PER_LINK_COUNT_LIMIT environment variables are deprecated. Support for them will be removed sometime after six months, to allow transition to the correct environment variables in the spec.
  • fix(otlp-exporter-base): pick the browser fetch mode from the document origin, so exports from an opaque-origin document (e.g. a sandboxed iframe) no longer fail with mode: 'same-origin' #7211 @​MO2k4
  • fix: raise the minimum @opentelemetry/api peer dependency version to 1.10.0 for packages that depend on @opentelemetry/core, @opentelemetry/otlp-transformer or @opentelemetry/instrumentation, as these use API 1.10 features. (#7258) @​volodymyrshk @​pichlermarc
    • Combining these packages with @opentelemetry/api 1.9.x never worked: they failed at runtime. The peer dependency now makes npm report this at install time instead.
    • If you see a peer dependency error after upgrading, update @opentelemetry/api to 1.10.0 or later.

📚 Documentation

  • docs(exporters): update dead semantic conventions resource specification links in OTLP exporters #7254 @​helmipradita

experimental/v0.300.0

0.300.0

Summary

  • The minimum supported Node.js has been raised to >=22.15.0. This means that support for Node.js 18 and 20 has been dropped.
  • The public interface has changed
  • Only stable versions 3.0.0 are compatible with this release

💥 Breaking Changes

  • chore(shim-opencensus)!: remove the @opentelemetry/shim-opencensus package
  • feat(instrumentation-http)!: remove deprecated serverName field from HttpInstrumentationConfig #7081
    • The serverName option had no effect; stable HTTP semantic conventions do not include http.server_name. Remove it from any setConfig() or constructor call.
  • feat(sdk-node)!: remove deprecated NodeSDKConfiguration fields logRecordProcessor, metricReader, spanProcessor and deprecated namespace re-exports node, tracing
    • NodeSDKConfiguration.logRecordProcessor — use logRecordProcessors instead.
    • NodeSDKConfiguration.metricReader — use metricReaders instead.

... (truncated)

Commits
  • 9985264 chore: prepare next release (#7272)
  • 7983f1c fix: raise @​opentelemetry/api peer floor to 1.10.0 where needed (#7259)
  • 0a5c4ed chore(deps): update dependency lerna to v10.1.1 (#7270)
  • 4eda691 fix(propagator-b3): reject invalid trace id lengths (#7262)
  • 5ca48a7 fix(context-zone): declare the @​opentelemetry/api peer dependency (#7268)
  • babaf15 docs(migration): note that API 1.10.0 needs SDK 3.x (#7253)
  • daae704 fix(instrumentation-http): don't require('forwarded-parse') in ESM builds (...
  • cc2a315 fix(otlp-grpc-exporter-base): avoid false mTLS configuration warnings (#7241)
  • 29eec06 fix(sdk-node): warn and skip, instead of erroring, on an unknown resource det...
  • 4667c0a docs: update dead semantic conventions resource specification links (#7254)
  • Additional commits viewable in compare view

Updates @opentelemetry/semantic-conventions from 1.43.0 to 1.44.0

Release notes

Sourced from @​opentelemetry/semantic-conventions's releases.

semconv/v1.44.0

1.44.0

🚀 Features

  • feat: update semantic conventions to v1.44.0 #7239
    • Semantic Conventions v1.44.0: changelog | latest docs
    • @opentelemetry/semantic-conventions (stable) changes: none
    • @opentelemetry/semantic-conventions/incubating (unstable) changes: 3 newly deprecated exports, 33 added exports

Unstable changes in v1.44.0

METRIC_CONTAINER_MEMORY_PAGING_FAULTS // container.memory.paging.faults: Replaced by `container.paging.faults`.
METRIC_K8S_NODE_MEMORY_PAGING_FAULTS  // k8s.node.memory.paging.faults: Replaced by `k8s.node.paging.faults`.
METRIC_K8S_POD_MEMORY_PAGING_FAULTS   // k8s.pod.memory.paging.faults: Replaced by `k8s.pod.paging.faults`.
ATTR_BROWSER_WEB_VITAL_DELTA                               // browser.web_vital.delta
ATTR_BROWSER_WEB_VITAL_ID                                  // browser.web_vital.id
ATTR_BROWSER_WEB_VITAL_NAME                                // browser.web_vital.name
  BROWSER_WEB_VITAL_NAME_VALUE_CLS                           // "cls"
  BROWSER_WEB_VITAL_NAME_VALUE_FCP                           // "fcp"
  BROWSER_WEB_VITAL_NAME_VALUE_FID                           // "fid"
  BROWSER_WEB_VITAL_NAME_VALUE_INP                           // "inp"
  BROWSER_WEB_VITAL_NAME_VALUE_LCP                           // "lcp"
  BROWSER_WEB_VITAL_NAME_VALUE_TTFB                          // "ttfb"
ATTR_BROWSER_WEB_VITAL_NAVIGATION_TYPE                     // browser.web_vital.navigation_type
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_BACK_FORWARD       // "back-forward"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_BACK_FORWARD_CACHE // "back-forward-cache"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_NAVIGATE           // "navigate"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_PRERENDER          // "prerender"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_RELOAD             // "reload"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_RESTORE            // "restore"
ATTR_BROWSER_WEB_VITAL_RATING                              // browser.web_vital.rating
  BROWSER_WEB_VITAL_RATING_VALUE_GOOD                        // "good"
  BROWSER_WEB_VITAL_RATING_VALUE_NEEDS_IMPROVEMENT           // "needs-improvement"
  BROWSER_WEB_VITAL_RATING_VALUE_POOR                        // "poor"
ATTR_BROWSER_WEB_VITAL_VALUE                               // browser.web_vital.value
ATTR_MESSAGING_KAFKA_CLUSTER_ID                            // messaging.kafka.cluster.id
</tr></table>

... (truncated)

Commits
  • 70253d9 chore: prepare next release (#7246)
  • 4c7796c chore(deps): update all patch versions (#7128)
  • f2a26a8 chore(deps): update dependency @​bufbuild/buf to v1.75.0 (#7215)
  • 0f27cf1 fix(deps): update dependency body-parser to v2.4.0 [security] (#7240)
  • d49d4d0 feat(semantic-conventions): update semantic conventions to v1.44.0 (#7239)
  • e3ea181 docs: note that CJS apps can need the ESM hook when a dependency is ESM (#7212)
  • d7d2d1b chore(deps): update actions/create-github-app-token action to v3.3.0 (#7214)
  • cd1e328 chore(deps): update dependency eslint-plugin-n to v18.5.0 (#7233)
  • 85ac9d3 chore(deps): update dependency knip to v6.43.0 (#7234)
  • 55f3df3 ci: update W3C harness for Python 3.14 (#7236)
  • Additional commits viewable in compare view

Updates @sentry/node from 10.76.2 to 10.78.0

Release notes

Sourced from @​sentry/node's releases.

10.78.0

  • feat(v10/deno): Re-export portable helpers that Cloudflare exposes (#25708)
  • fix(v10/core): Drop sampled-out errors before they take a promise buffer slot (#25753)
  • fix(v10/core): Stop sending client reports for breadcrumbs (#25752)
  • fix(v10/core): Use trace_metric data category for metrics rate limits and client reports (#25612)
  • fix(v10/nextjs): Don't crash Cloudflare workers on import of the Next.js version helper (#25730)

Bundle size 📦

Path Size
@​sentry/browser 27.64 KB
@​sentry/browser - with treeshaking flags 26.12 KB
@​sentry/browser (incl. Tracing) 46.2 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.96 KB
@​sentry/browser (incl. Tracing, Profiling) 50.87 KB
@​sentry/browser (incl. Tracing, Replay) 84.73 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 74.6 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 89.33 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 101.65 KB
@​sentry/browser (incl. Feedback) 44.42 KB
@​sentry/browser (incl. sendFeedback) 32.34 KB
@​sentry/browser (incl. FeedbackAsync) 37.34 KB
@​sentry/browser (incl. Metrics) 28.7 KB
@​sentry/browser (incl. Logs) 28.94 KB
@​sentry/browser (incl. Metrics & Logs) 29.6 KB
@​sentry/react 29.42 KB
@​sentry/react (incl. Tracing) 48.46 KB
@​sentry/vue 33.39 KB
@​sentry/vue (incl. Tracing) 48.52 KB
@​sentry/svelte 27.66 KB
CDN Bundle 30 KB
CDN Bundle (incl. Tracing) 48.13 KB
CDN Bundle (incl. Logs, Metrics) 31.56 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 49.42 KB
CDN Bundle (incl. Replay, Logs, Metrics) 70.13 KB
CDN Bundle (incl. Tracing, Replay) 84.97 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 86.24 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 90.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 91.9 KB
CDN Bundle - uncompressed 89.11 KB
CDN Bundle (incl. Tracing) - uncompressed 145.03 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 93.71 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 148.92 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 216.26 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 262.18 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 266.05 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 275.56 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 279.42 KB
@​sentry/nextjs (client) 51.06 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.78.0

  • feat(v10/deno): Re-export portable helpers that Cloudflare exposes (#25708)
  • fix(v10/core): Drop sampled-out errors before they take a promise buffer slot (#25753)
  • fix(v10/core): Stop sending client reports for breadcrumbs (#25752)
  • fix(v10/core): Use trace_metric data category for metrics rate limits and client reports (#25612)
  • fix(v10/nextjs): Don't crash Cloudflare workers on import of the Next.js version helper (#25730)

10.77.1

Important Changes

  • feat(v10/nextjs): Add a tunnel route handler that sends only the event payload to Sentry (#25559)

    The tunnelRoute option can now send events through a route handler in your app. The handler forwards only the event payload to Sentry, and no request headers. To use it, add this file next to your tunnelRoute option:

    // app/sentry-tunnel/route.ts (or src/app/sentry-tunnel/route.ts)
export { POST } from '@sentry/nextjs/tunnel';

    The handler accepts events for the DSN of your server SDK. To accept other DSNs, use createSentryTunnelRoute({ allowedDsns }) from the same import. Without the file, the tunnel route works as before.

    With the handler, tunnel requests go through your middleware. If your middleware blocks unauthenticated requests, exclude the tunnel route in its matcher.

    Also, the server no longer sends spans of tunnel requests when span streaming is on, because these spans only show the SDK's own traffic.

  • feat(v10/nextjs): Send tunnel route requests with credentials: 'omit' (#25561)

    With tunnelRoute and no tunnel route handler, @sentry/nextjs now sends events from the browser with credentials: 'omit', because the tunnel route does not need cookies. If a layer in front of your app checks cookies before it lets requests through (for example Vercel Deployment Protection), you can send them again in your browser Sentry.init call:

    // instrumentation-client.ts
Sentry.init({
  transportOptions: { fetchOptions: { credentials: 'same-origin' } },
});

  • fix(v10/deps)!: Limit @opentelemetry/api to <1.10.0 and the OpenTelemetry SDK to <3.0.0 (#25715)

    Breaking change

    If your app uses @opentelemetry/api 1.10.0 or OpenTelemetry SDK v3 together with v10 of the Sentry SDK, you must stay on @opentelemetry/api below 1.10.0 and OpenTelemetry SDK v2, or upgrade to v11.

    @opentelemetry/api 1.10.0 only works with OpenTelemetry SDK v3 (@opentelemetry/core 3.x, @opentelemetry/instrumentation 0.300.x). The SDK v2 packages that v10 uses only support @opentelemetry/api below 1.10.0, and SDK v3 needs Node.js 22.15.0 or newer, while v10 supports Node.js 18 and newer. For this reason, v10 now limits @opentelemetry/api to <1.10.0, and the @opentelemetry/instrumentation and @opentelemetry/exporter-trace-otlp-http peer dependencies of @sentry/node-core to <0.300.0.

    If your app depends on @opentelemetry/api directly, use a version below 1.10.0 (for example ~1.9.1). With 1.10.0, your app and the Sentry SDK use different copies of the API, and the OpenTelemetry calls of your app do not see the tracer provider of the Sentry SDK.

    To use @opentelemetry/api 1.10.0 and OpenTelemetry SDK v3, upgrade to v11 of the Sentry SDK. For the upgrade steps, see the migration guide.

... (truncated)

Commits
  • 5f277de release: 10.78.0
  • a4cc5f9 meta(changelog): Update changelog for 10.78.0 (#25831)
  • e4ea7fd fix(v10/deno): Re-export portable helpers that Cloudflare exposes (#25708)
  • 26744d3 fix(v10/core): Drop sampled-out errors before they take a promise buffer slot...
  • 3c8e1d7 fix(v10/core): Stop sending client reports for breadcrumbs (#25752)
  • 0664050 fix(v10/nextjs): Don't crash Cloudflare workers on import of the Next.js vers...
  • 76defeb fix(v10/core): Use trace_metric data category for metrics rate limits and c...
  • e2fa5ba meta(changelog): Merge 10.77.0 into 10.77.1 because 10.77.0 was not released ...
  • bb2bb52 fix(v10/astro): defer to @sentry/cloudflare/vite on Cloudflare Workers (#25...
  • 65d23eb fix(v10/elysia): Set SDK metadata on the options passed to i...

    Description has been truncated

@dependabot
build(deps): bump the npm-dependencies group across 1 directory with …
3781f2e 
…22 updates

Bumps the npm-dependencies group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.72.0` | `8.72.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.72.0` | `8.72.1` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.300.0` | `0.301.0` |
| [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.72.0` | `0.73.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.300.0` | `0.301.0` |
| [@opentelemetry/instrumentation-undici](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-undici) | `0.34.0` | `0.35.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.217.0` | `0.301.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.44.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.76.2` | `10.78.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.118.0` | `2.119.0` |
| [@x402/core](https://github.com/x402-foundation/x402) | `2.28.0` | `2.30.0` |
| [@x402/express](https://github.com/x402-foundation/x402) | `2.28.0` | `2.30.0` |
| [@x402/fetch](https://github.com/x402-foundation/x402) | `2.28.0` | `2.30.0` |
| [@x402/stellar](https://github.com/x402-foundation/x402) | `2.28.0` | `2.30.0` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.7.1` | `8.7.3` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.76.2` | `10.78.0` |
| [i18next](https://github.com/i18next/i18next) | `26.5.6` | `26.7.2` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.1.3` | `17.1.13` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.6.1` | `10.6.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.31` | `8.5.32` |
| [rollup-plugin-visualizer](https://github.com/btd/rollup-plugin-visualizer) | `7.1.1` | `7.1.2` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` |



Updates `@typescript-eslint/eslint-plugin` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.300.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.300.0...experimental/v0.301.0)

Updates `@opentelemetry/instrumentation-express` from 0.72.0 to 0.73.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.73.0/packages/instrumentation-express)

Updates `@opentelemetry/instrumentation-http` from 0.300.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.300.0...experimental/v0.301.0)

Updates `@opentelemetry/instrumentation-undici` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-undici/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/host-metrics-v0.35.0/packages/instrumentation-undici)

Updates `@opentelemetry/sdk-node` from 0.217.0 to 0.301.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.217.0...experimental/v0.301.0)

Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.44.0)

Updates `@sentry/node` from 10.76.2 to 10.78.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.78.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.76.2...10.78.0)

Updates `@supabase/supabase-js` from 2.118.0 to 2.119.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.119.0/packages/core/supabase-js)

Updates `@x402/core` from 2.28.0 to 2.30.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/core@v2.28.0...npm-@x402/core@v2.30.0)

Updates `@x402/express` from 2.28.0 to 2.30.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/express@v2.28.0...npm-@x402/express@v2.30.0)

Updates `@x402/fetch` from 2.28.0 to 2.30.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/fetch@v2.28.0...npm-@x402/fetch@v2.30.0)

Updates `@x402/stellar` from 2.28.0 to 2.30.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/stellar@v2.28.0...npm-@x402/stellar@v2.30.0)

Updates `express-rate-limit` from 8.7.1 to 8.7.3
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.7.1...v8.7.3)

Updates `@sentry/react` from 10.76.2 to 10.78.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.78.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.76.2...10.78.0)

Updates `i18next` from 26.5.6 to 26.7.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.5.6...v26.7.2)

Updates `react-i18next` from 17.1.3 to 17.1.13
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.1.3...v17.1.13)

Updates `autoprefixer` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.6.1...10.6.2)

Updates `postcss` from 8.5.31 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.31...8.5.32)

Updates `rollup-plugin-visualizer` from 7.1.1 to 7.1.2
- [Changelog](https://github.com/btd/rollup-plugin-visualizer/blob/master/CHANGELOG.md)
- [Commits](btd/rollup-plugin-visualizer@v7.1.1...v7.1.2)

Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/instrumentation-express"
  dependency-version: 0.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/instrumentation-undici"
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.301.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@sentry/node"
  dependency-version: 10.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.119.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@x402/core"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@x402/express"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@x402/fetch"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@x402/stellar"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@sentry/react"
  dependency-version: 10.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: i18next
  dependency-version: 26.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-i18next
  dependency-version: 17.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: rollup-plugin-visualizer
  dependency-version: 7.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants