chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@ai-sdk/anthropic (source)	3.0.75 → 3.0.103					dependencies	patch
@ai-sdk/openai (source)	3.0.62 → 3.0.89					dependencies	patch
@antfu/eslint-config	8.2.0 → 8.3.0					devDependencies	minor
@fontsource/manrope (source)	5.2.8 → 5.3.0					devDependencies	minor
@sentry/react (source)	10.52.0 → 10.68.0					devDependencies	minor
@tailwindcss/vite (source)	4.2.4 → 4.3.3					devDependencies	minor
@tanstack/react-query (source)	5.100.9 → 5.101.4					devDependencies	minor
@tanstack/react-query-devtools (source)	5.100.9 → 5.101.4					devDependencies	minor
@types/node (source)	25.6.0 → 25.9.5					devDependencies	minor
@types/react (source)	19.2.14 → 19.2.17					devDependencies	patch
@vitejs/plugin-react (source)	6.0.1 → 6.0.4					devDependencies	patch
ai (source)	6.0.175 → 6.0.237					dependencies	patch
dayjs (source)	1.11.20 → 1.11.21					devDependencies	patch
dexie (source)	4.4.2 → 4.4.4					devDependencies	patch
electron	41.5.0 → 41.10.3					devDependencies	minor
electron-builder (source)	26.8.1 → 26.15.3					devDependencies	minor
electron-log	5.4.3 → 5.4.4					devDependencies	patch
electron-updater (source)	6.8.3 → 6.8.9					devDependencies	patch
eslint (source)	10.3.0 → 10.8.0					devDependencies	minor
eslint-plugin-react-refresh	0.5.2 → 0.5.3					devDependencies	patch
framer-motion	12.38.0 → 12.43.0					devDependencies	minor
jotai	2.20.0 → 2.20.2					devDependencies	patch
lucide-react (source)	1.14.0 → 1.27.0					devDependencies	minor
nanoid	5.1.11 → 5.1.16					dependencies	patch
opencc-js	1.3.0 → 1.4.1					devDependencies	minor
pnpm (source)	10.11.0 → 10.34.5					packageManager	minor
pnpm/action-setup	v4.1.0 → v4.4.0					action	minor
prettier (source)	3.8.3 → 3.9.6					devDependencies	minor
prettier-plugin-tailwindcss	^0.7.2 → ^0.8.0					devDependencies	minor
radix-ui (source)	1.4.3 → 1.6.7					dependencies	minor
react (source)	19.2.6 → 19.2.8					devDependencies	patch
react-dom (source)	19.2.6 → 19.2.8					devDependencies	patch
react-scan (source)	0.5.6 → 0.5.7					devDependencies	patch
softprops/action-gh-release	v2.2.1 → v2.6.2					action	minor
tailwind-merge	3.5.0 → 3.6.0					devDependencies	minor
tailwindcss (source)	4.2.4 → 4.3.3					devDependencies	minor

---

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v3.0.103

Compare Source

Patch Changes

• 7865a71: fix(anthropic): report thinking tokens as reasoning token usage

v3.0.102

Compare Source

Patch Changes

• b4c4426: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
• b4c4426: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
• b4c4426: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

v3.0.101

Compare Source

Patch Changes

• 0608dca: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

v3.0.100

Compare Source

Patch Changes

• b7afc80: Warn when an unknown model uses the default 4096 max output token limit.

v3.0.99

Compare Source

Patch Changes

• db8cff6: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
• 94d0f86: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output

v3.0.98

Compare Source

Patch Changes

• 10366a2: fix(provider/anthropic): preserve web search citations when replaying assistant messages
• Updated dependencies [19093fd]
  • @​ai-sdk/provider-utils@​4.0.40

v3.0.97

Compare Source

Patch Changes

• Updated dependencies [06fb54c]
  • @​ai-sdk/provider-utils@​4.0.39

v3.0.96

Compare Source

v3.0.95

Compare Source

v3.0.94

Compare Source

Patch Changes

• 0952964: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose secureJsonParse from provider-utils.
• 764baab: Normalize a bare https://api.anthropic.com base URL to include /v1.
• Updated dependencies [0952964]
  • @​ai-sdk/provider-utils@​4.0.36

v3.0.93

Compare Source

v3.0.92

Compare Source

Patch Changes

• Updated dependencies [ea1e95b]
  • @​ai-sdk/provider-utils@​4.0.35

v3.0.91

Compare Source

Patch Changes

• 95bc6fd: feat (provider/anthropic): add claude-sonnet-5 model id
• Updated dependencies [fa850e6]
  • @​ai-sdk/provider@​3.0.13
  • @​ai-sdk/provider-utils@​4.0.34

v3.0.90

Patch Changes

• 28ff5a7: fix(anthropic): correctly map delta type when code execution tools are used

v3.0.89

Patch Changes

• Updated dependencies [b30e43a]
  • @​ai-sdk/provider-utils@​4.0.33

v3.0.88

Patch Changes

• Updated dependencies [f19334d]
  • @​ai-sdk/provider@​3.0.12
  • @​ai-sdk/provider-utils@​4.0.32

v3.0.87

Patch Changes

• 1b40ac7: Publish all packages under the @ai-v6 dist tag.
• Updated dependencies [1b40ac7]
  • @​ai-sdk/provider-utils@​4.0.31
  • @​ai-sdk/provider@​3.0.11

v3.0.86

Compare Source

Patch Changes

• 6086c60: fix(anthropic): reorder assistant content b/w client and provider tool use

v3.0.85

Compare Source

Patch Changes

• Updated dependencies [779f5cd]
  • @​ai-sdk/provider-utils@​4.0.30

v3.0.84

Patch Changes

• Updated dependencies [bfa5864]
• Updated dependencies [f42aa79]
  • @​ai-sdk/provider-utils@​4.0.29

v3.0.82

Compare Source

Patch Changes

• 2a91a17: feat(provider/anthropic): add support for claude-fable-5 and the fallbacks API parameter

v3.0.81

Compare Source

Patch Changes

• 4084fcd: feat(provider/anthropic): add support for claude-opus-4-8

v3.0.80

Compare Source

Patch Changes

• 263d3e6: fix(provider/anthropic): fix remaining errors with Anthropic code_execution tool dynamic calls from latest web_fetch or web_search

v3.0.79

Compare Source

Patch Changes

• d61a788: Handle errors from anthropic websearch tool

v3.0.78

Compare Source

Patch Changes

• 6e28d25: fix(anthropic): propagate toModelOutput providerOption to anthropic tool results

v3.0.77

Compare Source

Patch Changes

• d53314d: feat(anthropic): add the new advisor tool

v3.0.76

Compare Source

Patch Changes

• Updated dependencies [f591416]
  • @​ai-sdk/provider-utils@​4.0.27

antfu/eslint-config (@​antfu/eslint-config)

v8.3.0

Compare Source

   🚀 Features

• Make perfectionist configurable inside antfu()  -  by @​oliver139 in #​848 (ae1d6)
• stylistic: Allow easy setting brace style  -  by @​oliver139 in #​846 (bd784)
• svelte: Use recommended rules  -  by @​Jungzl in #​842 (6c839)

   🐞 Bug Fixes

• markdown: Scope user rule overrides away from md files  -  by @​antfu and Claude Opus 4.7 (1M context) in #​844 (8d25a)

    View changes on GitHub

fontsource/font-files (@​fontsource/manrope)

v5.3.0

Compare Source

getsentry/sentry-javascript (@​sentry/react)

v10.68.0

Compare Source

• feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#​21967)
• feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#​22224)
• feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#​22389)
• feat(server-utils): Allow integrations to be part of marker (#​22094)
• feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#​22141)
• feat(server-utils): Warn when bundler config has instrumented module in external (#​22379)
• feat(v10): Add http.route attribute to http.server spans with parameterized routes (#​22564)
• feat(v10): Add url.full and url.path to http.server spans (#​22533)
• feat(v10/cloudflare): Auto-instrument Durable Object classes (#​22541)
• feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#​22540)
• feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#​22543)
• feat(v10/cloudflare): Auto-instrument Workflow classes (#​22542)
• feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#​22538)
• feat(v10/core): Add instrumentStateGraph API (#​22491)
• feat(v10/core): Add url.full attribute to core fetch instrumentation (#​22436)
• feat(v10/core): Support filtering stackFrameVariables by variable name (#​22526)
• feat(v10/react-router): Make instrumentation API the default (#​22525)
• fix(cloudflare,deno,node): Align types of vercelai (#​22343)
• fix(core): Instrument Anthropic client in place instead of via a deep proxy (#​22305)
• fix(replay): Set text/javascript MIME type on compression worker Blob (#​22377)
• fix(sveltekit): Adapt frame rewriting for kit 3 (#​22407)
• fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#​22497)
• fix(v10/cloudflare): Import prismaIntegration from server-utils (#​22535)
• fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#​22527)
• fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#​22440)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​22342)
• chore: Add external contributor to CHANGELOG.md (#​22405)
• chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#​22395)
• chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#​22187)
• chore(size-limit): weekly auto-bump (#​22182)
• ci(v10): Add v10 to build and license-compliance branch filters (#​22499)
• feat(deps): Bump axios from 1.16.0 to 1.18.0 (#​22396)
• ref(server-utils): Remove unneeded orchestrion config (#​22384)
• ref(server-utils): Small fastify cleanup (#​22385)
• test: Remove unnecessary test waits (#​22383)
• test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#​22390)
• test(v10/cloudflare): Add Vite-build support to the integration-test runner (#​22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

Bundle size 📦

Path	Size
@​sentry/browser	27.11 KB
@​sentry/browser - with treeshaking flags	25.59 KB
@​sentry/browser (incl. Tracing)	45.51 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.25 KB
@​sentry/browser (incl. Tracing, Profiling)	50.15 KB
@​sentry/browser (incl. Tracing, Replay)	83.84 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.71 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.44 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.79 KB
@​sentry/browser (incl. Feedback)	43.88 KB
@​sentry/browser (incl. sendFeedback)	31.79 KB
@​sentry/browser (incl. FeedbackAsync)	36.8 KB
@​sentry/browser (incl. Metrics)	28.17 KB
@​sentry/browser (incl. Logs)	28.39 KB
@​sentry/browser (incl. Metrics & Logs)	29.07 KB
@​sentry/react	28.87 KB
@​sentry/react (incl. Tracing)	47.72 KB
@​sentry/vue	32.41 KB
@​sentry/vue (incl. Tracing)	47.43 KB
@​sentry/svelte	27.13 KB
CDN Bundle	29.45 KB
CDN Bundle (incl. Tracing)	47.42 KB
CDN Bundle (incl. Logs, Metrics)	30.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.69 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.34 KB
CDN Bundle (incl. Tracing, Replay)	84.04 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.32 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.71 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.94 KB
CDN Bundle - uncompressed	87.8 KB
CDN Bundle (incl. Tracing) - uncompressed	143.35 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	92.4 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	147.23 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	214.24 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	259.79 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	263.66 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	273.17 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	277.03 KB
@​sentry/nextjs (client)	50.2 KB
@​sentry/sveltekit (client)	45.92 KB
@​sentry/core/server	78.45 KB
@​sentry/core/browser	65.16 KB
@​sentry/node-core	61.77 KB
@​sentry/node	122.9 KB
@​sentry/node (incl. diagnostics channel injection)	147.76 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	68.39 KB
@​sentry/node/light	50.21 KB
@​sentry/node - without tracing	73.19 KB
@​sentry/aws-serverless	82.24 KB
@​sentry/cloudflare (withSentry) - minified	193.11 KB
@​sentry/cloudflare (withSentry)	475.28 KB

v10.67.0

Compare Source

Important Changes

• feat(sveltekit): Add support for SvelteKit 3 (#​22264)

  The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.

Other Changes

• feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in (#​22143)
• feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation (#​22126)
• feat(cloudflare): Instrument Cloudflare rate limiter bindings (#​22035)
• feat(core): Instrument workers-ai-provider (#​22119)
• feat(core): Rename queryParams to urlQueryParams (#​22217)
• feat(mongodb): implement orchestrion mongodb integration (#​22308)
• feat(mongoose): implement orchestrion mongoose integration (#​22202)
• feat(node): Rewrite tedious instrumentation to orchestrion tracing channels (#​22238)
• feat(nuxt): Add _experimental.useDiagnosticsChannelInjection (#​22323)
• feat(remix): Add orchestrion-based remix instrumentation (#​22244)
• feat(replay): Allow skipping the final flush on stop() via { flush: false } (#​22300)
• feat(server-utils): Add @​opentelemetry/instrumentation-koa orchestrion integration (#​22146)
• feat(server-utils): Add orchestrion aws-sdk channel integration core (#​22142)
• feat(server-utils): Allow passing custom transforms to orchestrion (#​22319)
• feat(server-utils): Port Bedrock aws-sdk extension and add integration tests (#​22166)
• feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions (#​22164)
• feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation (#​22165)
• feat(server-utils): Rewrite SentryLangChainInstrumentation to orchestrion (#​22266)
• feat(server-utils): Rewrite SentryLangGraphInstrumentation to orchestrion (#​22268)
• feat(vue): Set navigation.route.id from the route name (#​22372)
• fix(bundler): do not import type from optional peer dep (#​22304)
• fix(cloudflare): Bind Durable Object built-in handlers (#​22340)
• fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods (#​22310)
• fix(cloudflare): Route DO teardown through original waitUntil (#​22339)
• fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries (#​22376)
• fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms (#​22273)
• fix(core): Prevent infinite recursion when console is instrumented twice (#​21959)
• fix(nextjs): Mark internal chunk frames as not in_app (#​22354)
• fix(node): Register tracer provider when OTel API global pre-exists with a different version (#​22374)
• fix(node-native): Don't drop breadcrumbs from event loop block events (#​22322)
• fix(serve-rutils): Orchestrion diagnostics for async and require (#​22327)
• fix(server-utils): Only skip loader thread (#​22336)
• fix(sveltekit): Detect SvelteKit server build via Vite Environment API (#​21629)
• fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode (#​22293)
• fix(vue): Support pinia 4 in peer dependency range (#​22324)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​22357)
• chore: Add external contributor to CHANGELOG.md (#​22359)
• chore: Remove @apm-js-collab/code-transformer as a dependency (#​22317)
• chore(changelog): Add callout for SvelteKit 3 support (#​22371)
• chore(ci): Use openrouter keys for claude in ci (#​22381)
• chore(skills): Add libraries to framework update watcher (#​22326)
• docs(agents): Prefer reusing existing utils before adding new ones (#​22370)
• feat(deps): Bump @​opentelemetry/semantic-conventions from 1.42.0 to 1.43.0 in the opentelemetry group ([#​22333

✂ Note

PR body was truncated to here.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 4 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
.                                        |  WARN  deprecated fluent-ffmpeg@2.1.3
Progress: resolved 48, reused 0, downloaded 0, added 0
Progress: resolved 69, reused 0, downloaded 0, added 0
Progress: resolved 74, reused 0, downloaded 0, added 0
Progress: resolved 77, reused 0, downloaded 0, added 0
Progress: resolved 78, reused 0, downloaded 0, added 0
Progress: resolved 161, reused 0, downloaded 0, added 0
Progress: resolved 170, reused 0, downloaded 0, added 0
Progress: resolved 189, reused 0, downloaded 0, added 0
Progress: resolved 204, reused 0, downloaded 0, added 0
Progress: resolved 232, reused 0, downloaded 0, added 0
Progress: resolved 258, reused 0, downloaded 0, added 0
Progress: resolved 283, reused 0, downloaded 0, added 0
Progress: resolved 291, reused 0, downloaded 0, added 0
Progress: resolved 312, reused 0, downloaded 0, added 0
Progress: resolved 324, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/marchen-dev/marchen-player/packages/electron-ipc:
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "semver@6.3.1" (possible package takeover)

This error happened while installing the dependencies of electron@41.5.0
 at @electron/get@2.0.3

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.