chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #215 · wdhdev/my-github-profile

renovate · 2026-01-19T19:56:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/node (source)	`10.34.0` → `10.44.0`
@sentry/profiling-node (source)	`10.34.0` → `10.44.0`
@types/node (source)	`24.10.9` → `24.12.0`
axios (source)	`1.13.2` → `1.13.6`
cors	`2.8.5` → `2.8.6`
dotenv	`17.2.3` → `17.3.1`
express-session	`1.18.2` → `1.19.0`

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v10.44.0`

Compare Source

Important Changes

feat(effect): Add @sentry/effect SDK (Alpha) (#19644)

This release introduces @sentry/effect, a new SDK for Effect.ts applications. The SDK provides Sentry integration via composable Effect layers for both Node.js and browser environments.

Compose the effectLayer with optional tracing, logging, and metrics layers to instrument your Effect application:
```
import * as Sentry from '@&#8203;sentry/effect';
import * as Layer from 'effect/Layer';
import * as Logger from 'effect/Logger';

const SentryLive = Layer.mergeAll(
  Sentry.effectLayer({ dsn: '__DSN__', tracesSampleRate: 1.0, enableLogs: true }),
  Layer.setTracer(Sentry.SentryEffectTracer),
  Logger.replace(Logger.defaultLogger, Sentry.SentryEffectLogger),
  Sentry.SentryEffectMetricsLayer,
);
```
Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.
feat(astro): Add Astro 6 support (#19745)

This release enables full support for Astro v6 by adjusting our Astro SDK's middleware to some Astro-internal
changes. We cannot yet guarantee full support for server-islands, due to a bug in Astro v6
but we'll follow up on this once the bug is fixed.
feat(hono): Add basic instrumentation for Node runtime (#19817)

Adds a new package @sentry/hono/node (alpha) with basic instrumentation for Hono applications running in Node.js.
The Hono middleware for Cloudflare (@sentry/hono/cloudflare - alpha) comes with fixes, and it's now possible to access the Cloudflare Worker Bindings (env) from the options' callback.

Start using the new Hono middlewares by installing @sentry/hono and importing the respective middleware for your runtime.
More instructions can be found in the Hono readme.

Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.
feat(nestjs): Instrument @nestjs/bullmq @Processor decorator (#19759)

Automatically capture exceptions and create transactions for BullMQ queue processors in NestJS applications.

When using the @Processor decorator from @nestjs/bullmq, the SDK now automatically wraps the process() method
to create queue.process transactions with proper isolation scopes, preventing breadcrumb and scope leakage between
jobs and HTTP requests. Errors thrown in processors are captured with the auto.queue.nestjs.bullmq mechanism type.

Requires @nestjs/bullmq v10.0.0 or later.
feat(nestjs): Instrument @nestjs/schedule decorators (#19735)

Automatically capture exceptions thrown in @Cron, @Interval, and @Timeout decorated methods.

Previously, exceptions in @Cron methods were only captured if you used the SentryCron decorator. Now they are
captured automatically. The exception mechanism type changed from auto.cron.nestjs.async to
auto.function.nestjs.cron. If you have Sentry queries or alerts that filter on the old mechanism type, update them
accordingly.
feat(node): Expose headersToSpanAttributes option on nativeNodeFetchIntegration() (#19770)

Response headers like http.response.header.content-length were previously captured automatically on outgoing
fetch spans but are now opt-in since @opentelemetry/[email protected]. You can now configure which
headers to capture via the headersToSpanAttributes option.
```
Sentry.init({
  integrations: [
    Sentry.nativeNodeFetchIntegration({
      headersToSpanAttributes: {
        requestHeaders: ['x-custom-header'],
        responseHeaders: ['content-length', 'content-type'],
      },
    }),
  ],
});
```

Other Changes

feat(browser/cloudflare): Export conversation id from browser and cloudflare runtimes (#19820)
feat(bun): Set http response header attributes instead of response context headers (#19821)
feat(core): Add sentry.timestamp.sequence attribute for timestamp tie-breaking (#19421)
feat(deno): Set http response header attributes instead of response context headers (#19822)
feat(deps): Bump OpenTelemetry dependencies (#19682)
feat(nestjs): Use more specific span origins for NestJS guards, pipes, interceptors, and exception filters (#19751)
feat(nextjs): Vercel queue instrumentation (#19799)
feat(node): Avoid OTEL instrumentation for outgoing requests on Node 22+ (#17355)
feat(deps): bump hono from 4.12.5 to 4.12.7 (#19747)
feat(deps): bump mysql2 from 3.14.4 to 3.19.1 (#19787)
feat(deps): bump simple-git from 3.30.0 to 3.33.0 (#19744)
feat(deps): bump yauzl from 3.2.0 to 3.2.1 (#19809)
fix(browser): Skip browserTracingIntegration setup for bot user agents (#19708)
fix(cloudflare): Recreate client when previous one was disposed (#19727)
fix(core): Align Vercel embedding spans with semantic conventions (#19795)
fix(core): Fallback to sendDefaultPii setting in langchain and langgraph in non-node environments (#19813)
fix(core): Improve Vercel AI SDK instrumentation attributes (#19717)
fix(hono): Align error mechanism (#19831)
fix(hono): Allow passing env and fix type issues (#19825)
fix(nestjs): Fork isolation scope in @nestjs/event-emitter instrumentation (#19725)
fix(nextjs): Log correct lastEventId when error is thrown in component render (#19764)
fix(nextjs): Strip sourceMappingURL comments after deleting source maps in turbopack builds (#19814)
fix(nuxt): Upload client source maps (#19805)
fix(profiling-node): Fix NODE_VERSION rendered as [object Object] in warning (#19788)

Internal Changes

chore: Add oxlint migration commits to blame ignore (#19784)
chore: add oxlint typescript program suppression to workspace settings (#19692)
chore: Bump oxlint and oxfmt (#19771)
chore: Clean up lint and format script names (#19719)
chore(agents): Be more explicit on linting and formatting (#19803)
chore(ci): Extract metadata workflow (#19680)
chore(deps): bump tedious from 18.6.1 to 19.2.1 (#19786)
chore(deps-dev): bump file-type from 20.5.0 to 21.3.1 (#19748)
chore(effect): Add Effect to craft, README and issue templates (#19837)
chore(lint): Rule adjustments and fix warnings (#19612)
chore(skills): Add skill-creator and update managed agent skills (#19713)
docs(changelog): Add entry for @sentry/hono alpha release (#19828)
docs(hono): Document usage without "*" (#19756)
docs(new-release): Document sdkName for craft (#19736)
docs(new-release): Update docs based on new Craft flow (#19731)
ref(cloudflare): Prepare for WorkerEntrypoint (#19742)
ref(nestjs): Move event instrumentation unit tests to separate file (#19738)
style: Auto changes made from "yarn fix" (#19710)
test(astro,cloudflare): Add an E2E test for Astro 6 on Cloudflare (#19781)
test(browser): Add simulated mfe integration test (#19768)
test(e2e): Add MFE e2e test using vite-plugin-federation (#19778)
test(nextjs): Add vercel queue tests to next-16 (#19798)
tests(core): Fix flaky metric sequence number test (#19754)

Bundle size 📦

Path	Size
@sentry/browser	25.04 KB
@sentry/browser - with treeshaking flags	23.57 KB
@sentry/browser (incl. Tracing)	41.62 KB
@sentry/browser (incl. Tracing, Profiling)	46.17 KB
@sentry/browser (incl. Tracing, Replay)	79.51 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	69.33 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	84.11 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	96.07 KB
@sentry/browser (incl. Feedback)	41.45 KB
@sentry/browser (incl. sendFeedback)	29.6 KB
@sentry/browser (incl. FeedbackAsync)	34.53 KB
@sentry/browser (incl. Metrics)	26.29 KB
@sentry/browser (incl. Logs)	26.43 KB
@sentry/browser (incl. Metrics & Logs)	27.09 KB
@sentry/react	26.75 KB
@sentry/react (incl. Tracing)	43.9 KB
@sentry/vue	29.38 KB
@sentry/vue (incl. Tracing)	43.44 KB
@sentry/svelte	25.06 KB
CDN Bundle	27.62 KB
CDN Bundle (incl. Tracing)	42.49 KB
CDN Bundle (incl. Logs, Metrics)	28.46 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43.32 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.61 KB
CDN Bundle (incl. Tracing, Replay)	78.45 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.86 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.74 KB
CDN Bundle - uncompressed	80.69 KB
CDN Bundle (incl. Tracing) - uncompressed	125.55 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	83.49 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	128.35 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	204.22 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	239.66 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	242.45 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	252.27 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	255.05 KB
@sentry/nextjs (client)	46.26 KB
@sentry/sveltekit (client)	42.06 KB
@sentry/node-core	55.03 KB
@sentry/node	169.1 KB
@sentry/node - without tracing	94.09 KB
@sentry/aws-serverless	110.68 KB

`v10.43.0`

Compare Source

Important Changes

feat(nextjs): Add Turbopack support for React component name annotation (#19604)

We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements
are annotated with data-sentry-component, data-sentry-element, and data-sentry-source-file attributes at build
time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance
monitoring — previously only available with webpack builds.

This feature requires Next.js 16+ and is currently behind an experimental flag:
```
// next.config.ts
import { withSentryConfig } from '@&#8203;sentry/nextjs';

export default withSentryConfig(nextConfig, {
  _experimental: {
    turbopackReactComponentAnnotation: {
      enabled: true,
      ignoredComponents: ['Header', 'Footer'], // optional
    },
  },
});
```
feat(hono): Instrument middlewares app.use() (#19611)

Hono middleware registered via app.use() is now automatically instrumented, creating spans for each middleware invocation.

Other Changes

feat(node-core,node): Add tracePropagation option to http and fetch integrations (#19712)
feat(hono): Use parametrized names for errors (#19577)
fix(browser): Fix missing traces for user feedback (#19660)
fix(cloudflare): Use correct Proxy receiver in instrumentDurableObjectStorage (#19662)
fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#19624)
fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#19653)
fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#19651)
fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#19650)
fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#19645)
fix(node): Prevent duplicate LangChain spans from double module patching (#19684)
fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#19617)
fix(sveltekit): Fix file system race condition in source map cleaning (#19714)
fix(tanstackstart-react): Add workerd and worker export conditions (#19461)
fix(vercel-ai): Prevent tool call span map memory leak (#19328)
feat(deps): Bump @sentry/rollup-plugin from 5.1.0 to 5.1.1 (#19658)

Internal Changes

chore: Migrate to oxlint (#19134)
chore(aws-serverless): Don't build layer in build:dev command (#19586)
chore(ci): Allow triage action to run on issues from external users (#19701)
chore(deps): Bump immutable from 4.0.0 to 4.3.8 (#19637)
chore(e2e): Expand microservices E2E application with auto-tracing tests (#19652)
chore(hono): Prepare readme and add craft entry (#19583)
chore(sourcemaps): Make sourcemaps e2e test more generic (#19678)
chore(tanstackstart-react): Add link to docs in README (#19697)
feat(deps): Bump @hono/node-server from 1.19.4 to 1.19.10 (#19634)
feat(deps): Bump underscore from 1.12.1 to 1.13.8 (#19616)
test(angular): Fix failing canary test (#19639)
test(nextjs): Add sourcemaps test for nextjs turbopack (#19647)
tests(e2e): Add microservices e2e for nestjs (#19642)
tests(e2e): Add websockets e2e for nestjs (#19630)

Work in this release was contributed by @dmmulroy, @lithdew, and @smorimoto. Thank you for your contributions!

`v10.42.0`

Compare Source

feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#19534)
fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
fix(core): Do not remove promiseBuffer entirely (#19592)
fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
fix(react-router): Set correct transaction name when navigating with object argument (#19590)
ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#19464)

Internal Changes

chore(deps-dev): bump @sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
chore(deps): Bump @sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#19594)
ci(deps): bump actions/checkout from 4 to 6 (#19570)

Bundle size 📦

Path	Size
@sentry/browser	25.02 KB
@sentry/browser - with treeshaking flags	23.57 KB
@sentry/browser (incl. Tracing)	41.44 KB
@sentry/browser (incl. Tracing, Profiling)	45.99 KB
@sentry/browser (incl. Tracing, Replay)	79.35 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	69.21 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	83.93 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	95.91 KB
@sentry/browser (incl. Feedback)	41.44 KB
@sentry/browser (incl. sendFeedback)	29.58 KB
@sentry/browser (incl. FeedbackAsync)	34.52 KB
@sentry/browser (incl. Metrics)	26.17 KB
@sentry/browser (incl. Logs)	26.31 KB
@sentry/browser (incl. Metrics & Logs)	26.96 KB
@sentry/react	26.74 KB
@sentry/react (incl. Tracing)	43.72 KB
@sentry/vue	29.37 KB
@sentry/vue (incl. Tracing)	43.26 KB
@sentry/svelte	25.05 KB
CDN Bundle	27.51 KB
CDN Bundle (incl. Tracing)	42.25 KB
CDN Bundle (incl. Logs, Metrics)	28.33 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43.07 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.49 KB
CDN Bundle (incl. Tracing, Replay)	78.26 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.5 KB
CDN Bundle - uncompressed	80.42 KB
CDN Bundle (incl. Tracing) - uncompressed	125.07 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	83.19 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	127.83 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	203.96 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	239.21 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	241.96 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	251.82 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	254.56 KB
@sentry/nextjs (client)	46.08 KB
@sentry/sveltekit (client)	41.89 KB
@sentry/node-core	51.01 KB
@sentry/node	170.6 KB
@sentry/node - without tracing	95.09 KB
@sentry/aws-serverless	110.53 KB

`v10.41.0`

Compare Source

`v10.40.0`

Compare Source

Important Changes

feat(tanstackstart-react): Add global sentry exception middlewares (#19330)

The sentryGlobalRequestMiddleware and sentryGlobalFunctionMiddleware global middlewares capture unhandled exceptions thrown in TanStack Start API routes and server functions. Add them as the first entries in the requestMiddleware and functionMiddleware arrays of createStart():

import { createStart } from '@&#8203;tanstack/react-start/server';
import { sentryGlobalRequestMiddleware, sentryGlobalFunctionMiddleware } from '@&#8203;sentry/tanstackstart-react/server';

export default createStart({
  requestMiddleware: [sentryGlobalRequestMiddleware, myRequestMiddleware],
  functionMiddleware: [sentryGlobalFunctionMiddleware, myFunctionMiddleware],
});

feat(tanstackstart-react)!: Export Vite plugin from @sentry/tanstackstart-react/vite subpath (#19182)

The sentryTanstackStart Vite plugin is now exported from a dedicated subpath. Update your import:
```
- import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react';
+ import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react/vite';
```
fix(node-core): Reduce bundle size by removing apm-js-collab and requiring pino >= 9.10 (#18631)

In order to keep receiving pino logs, you need to update your pino version to >= 9.10, the reason for the support bump is to reduce the bundle size of the node-core SDK in frameworks that cannot tree-shake the apm-js-collab dependency.
fix(browser): Ensure user id is consistently added to sessions (#19341)

Previously, the SDK inconsistently set the user id on sessions, meaning sessions were often lacking proper coupling to the user set for example via Sentry.setUser().
Additionally, the SDK incorrectly skipped starting a new session for the first soft navigation after the pageload.
This patch fixes these issues. As a result, metrics around sessions, like "Crash Free Sessions" or "Crash Free Users" might change.
This could also trigger alerts, depending on your set thresholds and conditions.
We apologize for any inconvenience caused!

While we're at it, if you're using Sentry in a Single Page App or meta framework, you might want to give the new 'page' session lifecycle a try!
This new mode no longer creates a session per soft navigation but continues the initial session until the next hard page refresh.
Check out the docs to learn more!
ref!(gatsby): Drop Gatsby v2 support (#19467)

We drop support for Gatsby v2 (which still relies on webpack 4) for a critical security update in https://github.com/getsentry/sentry-javascript-bundler-plugins/releases/tag/5.0.0

Other Changes

feat(astro): Add support for Astro on CF Workers (#19265)
feat(cloudflare): Instrument async KV API (#19404)
feat(core): Add framework-agnostic tunnel handler (#18892)
feat(deno): Export logs API from Deno SDK (#19313)
feat(deno): Export metrics API from Deno SDK (#19305)
feat(deno): instrument Deno.serve with async context support (#19230)
feat(deps): bump babel-loader from 8.2.5 to 10.0.0 (#19303)
feat(deps): bump body-parser from 1.20.4 to 2.2.2 (#19191)
feat(deps): Bump hono from 4.11.7 to 4.11.10 (#19440)
feat(deps): bump qs from 6.14.1 to 6.14.2 (#19310)
feat(deps): bump the opentelemetry group with 4 updates (#19425)
feat(feedback): Add setTheme() to dynamically update feedback widget color scheme (#19430)
feat(nextjs): Add sourcemaps.filesToDeleteAfterUpload as a top-level option (#19280)
feat(node): Add ignoreConnectSpans option to postgresIntegration (#19291)
feat(node): Bump to latest @fastify/otel (#19452)
fix: Bump bundler plugins to v5 (#19468)
fix: updated the codecov config (#19350)
fix(aws-serverless): Prevent crash in isPromiseAllSettledResult with null/undefined array elements (#19346)
fix(bun) Export pinoIntegration from @sentry/node (#17990)
fix(core,browser): Delete SentryNonRecordingSpan from fetch/xhr map (#19336)
fix(core): Explicitly flush log buffer in client.close() (#19371)
fix(core): Langgraph state graph invoke accepts null to resume (#19374)
fix(core): Wrap decodeURI in node stack trace parser to handle malformed URIs (#19400)
fix(deps): Bump nuxt devDependency to fix CVE-2026-24001 (#19249)
fix(deps): Bump to latest version of each minimatch major (#19486)
fix(nextjs): Apply environment from options if set (#19274)
fix(nextjs): Don't set sentry.drop_transaction attribute on spans when skipOpenTelemetrySetup is enabled (#19333)
fix(nextjs): Normalize trailing slashes in App Router route parameterization (#19365)
fix(nextjs): Return correct lastEventId for SSR pages (#19240)
fix(nextjs): Set parameterized transaction name for non-transaction events (#19316)
fix(node-core): Align pino mechanism type with spec conventions (#19363)
fix(nuxt): Use options.rootDir instead of options.srcDir (#19343)

Internal Changes

- test(nextjs): Add bun e2e test app ([#19318](https://redirect.github.com/getsentry/sentry-javascript/pull/19318)) - test(nextjs): Deactivate canary test for cf-workers ([#19483](https://redirect.github.com/getsentry/sentry-javascript/pull/19483)) - tests(langchain): Fix langchain v1 internal error tests ([#19409](https://redirect.github.com/getsentry/sentry-javascript/pull/19409)) - ref(nuxt): Remove `defineNitroPlugin` wrapper ([#19334](https://redirect.github.com/getsentry/sentry-javascript/pull/19334)) - ref(cloudflare): Move internal files and functions around ([#19369](https://redirect.github.com/getsentry/sentry-javascript/pull/19369)) - chore: Add external contributor to CHANGELOG.md ([#19395](https://redirect.github.com/getsentry/sentry-javascript/pull/19395)) - chore: Add github action to notify stale PRs ([#19361](https://redirect.github.com/getsentry/sentry-javascript/pull/19361)) - chore: add oxfmt changes to blame ignore rev list ([#19366](https://redirect.github.com/getsentry/sentry-javascript/pull/19366)) - chore: Enhance AI integration guidelines with runtime-specific placem… ([#19296](https://redirect.github.com/getsentry/sentry-javascript/pull/19296)) - chore: Ignore `lerna.json` for prettier ([#19288](https://redirect.github.com/getsentry/sentry-javascript/pull/19288)) - chore: migrate to oxfmt ([#19200](https://redirect.github.com/getsentry/sentry-javascript/pull/19200)) - chore: Revert to lerna v8 ([#19294](https://redirect.github.com/getsentry/sentry-javascript/pull/19294)) - chore: Unignore HTML files and reformat with oxfmt ([#19311](https://redirect.github.com/getsentry/sentry-javascript/pull/19311)) - chore(ci): Adapt max turns of triage issue agent ([#19473](https://redirect.github.com/getsentry/sentry-javascript/pull/19473)) - chore(ci): Add `environment` to triage action ([#19375](https://redirect.github.com/getsentry/sentry-javascript/pull/19375)) - chore(ci): Add `id-token: write` permission to triage workflow ([#19381](https://redirect.github.com/getsentry/sentry-javascript/pull/19381)) - chore(ci): Move monorepo to nx ([#19325](https://redirect.github.com/getsentry/sentry-javascript/pull/19325)) - chore(cursor): Add rules for fetching develop docs ([#19377](https://redirect.github.com/getsentry/sentry-javascript/pull/19377)) - chore(deps-dev): Bump @sveltejs/kit from 2.49.5 to 2.52.2 in /dev-packages/e2e-tests/test-applications/sveltekit-2 ([#19441](https://redirect.github.com/getsentry/sentry-javascript/pull/19441)) - chore(deps-dev): Bump @sveltejs/kit from 2.49.5 to 2.52.2 in /dev-packages/e2e-tests/test-applications/sveltekit-2-kit-tracing ([#19446](https://redirect.github.com/getsentry/sentry-javascript/pull/19446)) - chore(deps-dev): Bump @sveltejs/kit from 2.49.5 to 2.52.2 in /dev-packages/e2e-tests/test-applications/sveltekit-cloudflare-pages ([#19462](https://redirect.github.com/getsentry/sentry-javascript/pull/19462)) - chore(deps-dev): Bump @sveltejs/kit from 2.50.1 to 2.52.2 ([#19442](https://redirect.github.com/getsentry/sentry-javascript/pull/19442)) - chore(deps-dev): bump @testing-library/react from 13.0.0 to 15.0.5 ([#19194](https://redirect.github.com/getsentry/sentry-javascript/pull/19194)) - chore(deps-dev): bump @types/ember__debug from 3.16.5 to 4.0.8 ([#19429](https://redirect.github.com/getsentry/sentry-javascript/pull/19429)) - chore(deps-dev): bump ember-resolver from 13.0.2 to 13.1.1 ([#19301](https://redirect.github.com/getsentry/sentry-javascript/pull/19301)) - chore(deps): Bump @actions/glob from 0.4.0 to 0.6.1 ([#19427](https://redirect.github.com/getsentry/sentry-javascript/pull/19427)) - chore(deps): bump agents from 0.2.32 to 0.3.10 in /dev-packages/e2e-tests/test-applications/cloudflare-mcp ([#19326](https://redirect.github.com/getsentry/sentry-javascript/pull/19326)) - chore(deps): Bump hono from 4.11.7 to 4.11.10 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#19438](https://redirect.github.com/getsentry/sentry-javascript/pull/19438)) - chore(deps): Bump Sentry CLI to latest v2 ([#19477](https://redirect.github.com/getsentry/sentry-javascript/pull/19477)) - chore(deps): Bump transitive dep `fast-xml-parser` ([#19433](https://redirect.github.com/getsentry/sentry-javascript/pull/19433)) - chore(deps): upgrade tar to 7.5.9 to fix CVE-2026-26960 ([#19445](https://redirect.github.com/getsentry/sentry-javascript/pull/19445)) - chore(github): Add `allowedTools` to Claude GitHub action ([#19386](https://redirect.github.com/getsentry/sentry-javascript/pull/19386)) - chore(github): Add workflow to trigger `triage-issue` skill ([#19358](https://redirect.github.com/getsentry/sentry-javascript/pull/19358)) - chore(github): Add write tool for markdown report ([#19387](https://redirect.github.com/getsentry/sentry-javascript/pull/19387)) - chore(github): Change tool permission path ([#19389](https://redirect.github.com/getsentry/sentry-javascript/pull/19389)) - chore(llm): Add `triage-issue` skill ([#19356](https://redirect.github.com/getsentry/sentry-javascript/pull/19356)) - chore(llm): Better defense against prompt injection in triage skill ([#19410](https://redirect.github.com/getsentry/sentry-javascript/pull/19410)) - chore(llm): Make cross-repo search optional and remove file cleanup ([#19401](https://redirect.github.com/getsentry/sentry-javascript/pull/19401)) - chore(node-core): Make @sentry/opentelemetry not a peer dep in node… ([#19308](https://redirect.github.com/getsentry/sentry-javascript/pull/19308)) - chore(repo): Allow WebFetch for Sentry docs in Claude settings ([#18890](https://redirect.github.com/getsentry/sentry-javascript/pull/18890)) - chore(repo): Increase number of concurrently running nx tasks ([#19443](https://redirect.github.com/getsentry/sentry-javascript/pull/19443)) - chore(skills): Add security notes for injection defense ([#19379](https://redirect.github.com/getsentry/sentry-javascript/pull/19379)) - chore(triage-action): Fix JSON parsing ([#19471](https://redirect.github.com/getsentry/sentry-javascript/pull/19471)) - chore(triage-issue): Improve triage prompt for accuracy ([#19454](https://redirect.github.com/getsentry/sentry-javascript/pull/19454)) - chore(triage-skill): Add GitHub parsing python util script ([#19405](https://redirect.github.com/getsentry/sentry-javascript/pull/19405)) - chore(triage-skill): Increase `num_turns` and add script to post summary ([#19456](https://redirect.github.com/getsentry/sentry-javascript/pull/19456)) - ci(fix-security-vulnerability): Add id token write permission ([#19412](https://redirect.github.com/getsentry/sentry-javascript/pull/19412)) - ci(fix-security-vulnerability): Be specific about how to fetch the alert page ([#19414](https://redirect.github.com/getsentry/sentry-javascript/pull/19414)) - ci(fix-security-vulnerability): Run fetch alert first before executing skill ([#19418](https://redirect.github.com/getsentry/sentry-javascript/pull/19418)) - ci(fix-security-vulnerability): Use opus 4.6 ([#19416](https://redirect.github.com/getsentry/sentry-javascript/pull/19416)) - ci(github): Add tilde to file path to not exact-match ([#19392](https://redirect.github.com/getsentry/sentry-javascript/pull/19392)) - ci(triage-skill): Allow `Write` and remove `rm` permission ([#19397](https://redirect.github.com/getsentry/sentry-javascript/pull/19397)) - ci(triage-skill): Run on opened issues ([#19423](https://redirect.github.com/getsentry/sentry-javascript/pull/19423)) - docs(nuxt): Remove duplicated setup instructions ([#19422](https://redirect.github.com/getsentry/sentry-javascript/pull/19422)) - feat(ci): Add security vulnerability skill action ([#19355](https://redirect.github.com/getsentry/sentry-javascript/pull/19355))

Work in this release was contributed by @LudvigHz and @jadengis. Thank you for your contributions!

Bundle size 📦

Path	Size
@sentry/browser	25.02 KB
@sentry/browser - with treeshaking flags	23.56 KB
@sentry/browser (incl. Tracing)	41.43 KB
@sentry/browser (incl. Tracing, Profiling)	45.98 KB
@sentry/browser (incl. Tracing, Replay)	79.34 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	69.2 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	83.92 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	95.9 KB
@sentry/browser (incl. Feedback)	41.43 KB
@sentry/browser (incl. sendFeedback)	29.58 KB
@sentry/browser (incl. FeedbackAsync)	34.51 KB
@sentry/browser (incl. Metrics)	26.16 KB
@sentry/browser (incl. Logs)	26.3 KB
@sentry/browser (incl. Metrics & Logs)	26.96 KB
@sentry/react	26.73 KB
@sentry/react (incl. Tracing)	43.71 KB
@sentry/vue	29.36 KB
@sentry/vue (incl. Tracing)	43.23 KB
@sentry/svelte	25.04 KB
CDN Bundle	27.5 KB
CDN Bundle (incl. Tracing)	42.24 KB
CDN Bundle (incl. Logs, Metrics)	28.32 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43.06 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.49 KB
CDN Bundle (incl. Tracing, Replay)	78.25 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.5 KB
CDN Bundle - uncompressed	80.41 KB
CDN Bundle (incl. Tracing) - uncompressed	125.06 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	83.18 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~chore(deps): update all non-major dependencies to v10.35.0~~ chore(deps): update all non-major dependencies to v10.36.0 Jan 21, 2026

renovate bot force-pushed the renovate/all-minor-patch branch from 51b100c to 3fe316d Compare January 21, 2026 16:35

renovate bot changed the title ~~chore(deps): update all non-major dependencies to v10.36.0~~ chore(deps): update all non-major dependencies Jan 22, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from ec6a974 to d8ce46b Compare January 27, 2026 21:00

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 6893230 to a64d0ec Compare February 5, 2026 18:13

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 130c0f9 to 38c97d2 Compare February 10, 2026 16:55

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from ebae808 to ef2a796 Compare February 16, 2026 12:34

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from e2c965d to 5960797 Compare March 3, 2026 13:54

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from cdbe612 to 84676a5 Compare March 10, 2026 14:47

renovate bot force-pushed the renovate/all-minor-patch branch from 84676a5 to ae5db89 Compare March 17, 2026 16:46

chore(deps): update all non-major dependencies

84f0e68

renovate bot force-pushed the renovate/all-minor-patch branch from ae5db89 to 84f0e68 Compare March 17, 2026 21:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#215

chore(deps): update all non-major dependencies#215
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.44.0

Important Changes

Other Changes

Bundle size 📦

v10.43.0

Important Changes

Other Changes

v10.42.0

Bundle size 📦

v10.41.0

v10.40.0

Important Changes

Other Changes

Bundle size 📦

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 19, 2026 •

edited

Loading

`v10.44.0`

`v10.43.0`

`v10.42.0`

`v10.41.0`

`v10.40.0`