dev: bump the safe group across 1 directory with 7 updates by dependabot[bot] · Pull Request #7766 · TheThingsNetwork/lorawan-stack

dependabot · 2025-11-20T14:13:33Z

Bumps the safe group with 7 updates in the / directory:

Package	From	To
@sentry/react	`10.24.0`	`10.26.0`
@storybook/cli	`10.0.6`	`10.0.8`
cypress	`15.6.0`	`15.7.0`
eslint-plugin-jsdoc	`61.1.12`	`61.3.0`
html-webpack-plugin	`5.6.4`	`5.6.5`
mjml	`4.16.1`	`4.17.1`
webpack	`5.102.1`	`5.103.0`

Updates @sentry/react from 10.24.0 to 10.26.0

Release notes

Sourced from @sentry/react's releases.

10.26.0

Important Changes

feat(core): Instrument LangGraph Agent (#18114)

Adds support for instrumenting LangGraph StateGraph operations in Node. The LangGraph integration can be configured as follows:
Sentry.init({
  dsn: '__DSN__',
  sendDefaultPii: false, // Even with PII disabled globally
  integrations: [
    Sentry.langGraphIntegration({
      recordInputs: true, // Force recording input messages
      recordOutputs: true, // Force recording response text
    }),
  ],
});
feat(cloudflare/vercel-edge): Add manual instrumentation for LangGraph (#18112)

Instrumentation for LangGraph in Cloudflare Workers and Vercel Edge environments is supported by manually calling instrumentLangGraph:
import * as Sentry from '@sentry/cloudflare'; // or '@sentry/vercel-edge'
import { StateGraph, START, END, MessagesAnnotation } from '@langchain/langgraph';
// Create and instrument the graph
const graph = new StateGraph(MessagesAnnotation)
.addNode('agent', agentFn)
.addEdge(START, 'agent')
.addEdge('agent', END);
Sentry.instrumentLangGraph(graph, {
recordInputs: true,
recordOutputs: true,
});
const compiled = graph.compile({ name: 'weather_assistant' });
await compiled.invoke({
messages: [{ role: 'user', content: 'What is the weather in SF?' }],
});
feat(node): Add OpenAI SDK v6 support (#18244)

Other Changes

... (truncated)

Changelog

Sourced from @sentry/react's changelog.

10.26.0

Important Changes

feat(core): Instrument LangGraph Agent (#18114)

Adds support for instrumenting LangGraph StateGraph operations in Node. The LangGraph integration can be configured as follows:
Sentry.init({
  dsn: '__DSN__',
  sendDefaultPii: false, // Even with PII disabled globally
  integrations: [
    Sentry.langGraphIntegration({
      recordInputs: true, // Force recording input messages
      recordOutputs: true, // Force recording response text
    }),
  ],
});
feat(cloudflare/vercel-edge): Add manual instrumentation for LangGraph (#18112)

Instrumentation for LangGraph in Cloudflare Workers and Vercel Edge environments is supported by manually calling instrumentLangGraph:
import * as Sentry from '@sentry/cloudflare'; // or '@sentry/vercel-edge'
import { StateGraph, START, END, MessagesAnnotation } from '@langchain/langgraph';
// Create and instrument the graph
const graph = new StateGraph(MessagesAnnotation)
.addNode('agent', agentFn)
.addEdge(START, 'agent')
.addEdge('agent', END);
Sentry.instrumentLangGraph(graph, {
recordInputs: true,
recordOutputs: true,
});
const compiled = graph.compile({ name: 'weather_assistant' });
await compiled.invoke({
messages: [{ role: 'user', content: 'What is the weather in SF?' }],
});
feat(node): Add OpenAI SDK v6 support (#18244)

Other Changes

... (truncated)

Commits

8ab6227 release: 10.26.0
d33c795 Merge pull request #18249 from getsentry/prepare-release/10.26.0
be12569 meta(changelog): Update changelog for 10.26.0
be29c56 chore(e2e): Bump zod in e2e tests (#18251)
b3bf56d feat(node): Add OpenAI SDK v6 support and integration tests (#18244)
584d4bc feat(cloudflare/vercel-edge): Add manual instrumentation for LangGraph (#18112)
d12ba2e feat(metrics): Add default server.address attribute on server runtimes (#18...
935ef55 feat(core): Support OpenAI embeddings API (#18224)
610ae69 feat(browser-utils): bump web-vitals to 5.1.0 (#18091)
9482a02 fix(nextjs): Respect PORT variable for dev error symbolication (#18227)
Additional commits viewable in compare view

Updates @storybook/cli from 10.0.6 to 10.0.8

Release notes

Sourced from @storybook/cli's releases.

v10.0.8

10.0.8

React Native Web: Fix react native resuables and nativewind - #33056, thanks @dannyhw!

React Native Web: Update vite-plugin-rnw for overall improvements - #32991, thanks @dannyhw!

WebComponents: Fix `custom-elements.json` not being loaded - #33045, thanks @ndelangen!

v10.0.7

10.0.7

ESLint: Only apply csf-strict rules on stories files - #31963, thanks @cylewaitforit!

Next.js: Update SWC loader to support new wasm detection - #33003, thanks @yannbf!

Changelog

Sourced from @storybook/cli's changelog.

10.0.8

React Native Web: Fix react native resuables and nativewind - #33056, thanks @dannyhw!

React Native Web: Update vite-plugin-rnw for overall improvements - #32991, thanks @dannyhw!

WebComponents: Fix custom-elements.json not being loaded - #33045, thanks @ndelangen!

10.0.7

ESLint: Only apply csf-strict rules on stories files - #31963, thanks @cylewaitforit!

Next.js: Update SWC loader to support new wasm detection - #33003, thanks @yannbf!

Commits

0c00f80 Bump version from "10.0.7" to "10.0.8" [skip ci]
6f93a68 add eslint-disable comments for 'depend/ban-dependencies' rule in multiple files
8e7b0d2 Merge pull request #33044 from storybookjs/norbert/bust-cache-2015-11-14
c1d388c Bump version from "10.0.6" to "10.0.7" [skip ci]
See full diff in compare view

Updates cypress from 15.6.0 to 15.7.0

Release notes

Sourced from cypress's releases.

v15.7.0

Changelog: https://docs.cypress.io/app/references/changelog#15-7-0

Commits

201e22e chore: Revert "dependency: update mime from 3.0.0 to 4.1.0 (#32936)" (#32975)
4b2e6dc chore: release 15.7.0 (#32973)
71a393e fix: make sure angular project configs can resolve correctly on windows (#32971)
a267d31 dependency: update mime from 3.0.0 to 4.1.0 (#32936)
763d701 chore: reduce max visibility checks for command log entries to 10 (#32962)
1bfe23f chore: updating v8 snapshot cache (#32967)
71c90d8 chore: updating v8 snapshot cache (#32966)
85bf4e5 chore: updating v8 snapshot cache (#32965)
ae46f1e fix: filter large user-supplied config values from the cloud API (#32957)
70a9525 chore: release @cypress/webpack-dev-server-v5.2.0
Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 61.1.12 to 61.3.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v61.3.0

61.3.0 (2025-11-19)

Features

allowIndentedSections option; fixes #541 (edaf615)

v61.2.1

61.2.1 (2025-11-13)

Bug Fixes

require-param: ensure all structures with interfaces do not trigger with interfaceExemptsParamsCheck: true (39a5b0a)

tag-lines: avoid reformatting post-delimiter spacing; fixes #1593 (702b226)

v61.2.0

61.2.0 (2025-11-12)

Features

sort-tags: add tagExceptions to allow additional lines per tag; fixes #1594 (85a1ea1)

Commits

03adf63 refactor: forbid inconsistent indentation with new option
edaf615 feat: allowIndentedSections option; fixes #541
bba6dd8 chore(deps-dev): bump glob from 11.0.3 to 11.1.0
7d032f2 chore: update lock file
702b226 fix(tag-lines): avoid reformatting post-delimiter spacing; fixes #1593
39a5b0a fix(require-param): ensure all structures with interfaces do not trigger w...
92a87f7 test: remove deprecated type from tests
85a1ea1 feat(sort-tags): add tagExceptions to allow additional lines per tag; fix...
See full diff in compare view

Updates html-webpack-plugin from 5.6.4 to 5.6.5

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.5 (2025-11-18)

Bug Fixes

localStorage exception in Node 25+ (#1880) (a25aa2e)

Commits

9a39db8 chore(release): 5.6.5
a25aa2e fix: localStorage exception in Node 25+ (#1880)
See full diff in compare view

Updates mjml from 4.16.1 to 4.17.1

Release notes

Sourced from mjml's releases.

v4.17.1

What's Changed

Fixes

mjml-wrapper: allowed attributes not inheriting #3011 by @dazgreer in mjmlio/mjml#3012

Full Changelog: mjmlio/mjml@v4.17.0...v4.17.1

v4.17.0

What's Changed

Features

mjml-wrapper: add gap between sections #2977 by @dazgreer in mjmlio/mjml#3004

Fixes

mjml-social: respect align and icon-height attributes #3001 by @dazgreer in mjmlio/mjml#3002

mjml-carousel: hide thumbnails if not supported #2999 by @dazgreer in mjmlio/mjml#3000

mjml-accordion: respect font-family and padding-x attributes #2997 by @dazgreer in mjmlio/mjml#2998

mjml-table: respect cellspacing #2995 by @dazgreer in mjmlio/mjml#2996

mjml-navbar: fix ico-padding-x that was not working #2991 by @dazgreer in mjmlio/mjml#2992

mjml-column: fix border-radius that was not working #2989 by @dazgreer in mjmlio/mjml#2990

Documentation

Added link to support matrix by @dazgreer in mjmlio/mjml#3005

Update image URLs by @dazgreer in mjmlio/mjml#3007

Examples indenting by @EtienneHosman in mjmlio/mjml#2974

Other

Update local MJML testing by @dazgreer in mjmlio/mjml#2987

Add publish action by @totocap in mjmlio/mjml#3009

New Contributors

@EtienneHosman made their first contribution in mjmlio/mjml#2974

Full Changelog: mjmlio/mjml@v4.16.1...v4.17.0

Commits

3f3b0bc v4.17.1
375c593 v4.17.0
81f37ea Merge pull request #2990 from mjmlio/bugfix/MJML-36-mj-column_border_radius
025e3fc Merge pull request #2992 from mjmlio/bugfix/MJML-37-mj-navbar_ico-padding-x
424cac8 Merge pull request #2996 from mjmlio/bugfix/MJML-39-mj-table-cellspacing
4d975b0 Merge pull request #2998 from mjmlio/bugfix/MJML-43-mj-accordion_font-family_...
4d41b9d Merge pull request #3000 from mjmlio/feature/MJML-49-mj-carousel_thumbnails_f...
9bac7c6 Merge pull request #3002 from mjmlio/bugfix/MJML-41-mj-social_align_icon-height
3b60b46 feature(mjml-wrapper): add gap between sections #2977
d92941b fix(mjml-social): align / icon-height #3001
Additional commits viewable in compare view

Updates webpack from 5.102.1 to 5.103.0

Release notes

Sourced from webpack's releases.

v5.103.0

Features

Added DotenvPlugin and top level dotenv option to enable this plugin

Added WebpackManifestPlugin

Added support the ignoreList option in devtool plugins

Allow to use custom javascript parse function

Added import.meta.env support for environment variables

Added support for import.meta.dirname and import.meta.filename

Added support import.defer() for statistical path

Handle import.meta.main

Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }

Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target

[CSS] Added the exportType option with link (by default), "text" and css-style-sheet values

[CSS] Added support for composes properties

Fixes

The dependOn chunk must be loaded before the common chunk

Return to namespace import when the external request includes a specific export

No runtime extra runtime code for module libraries

Delay HMR accept dependencies to preserve import attributes

Properly handle external presets for universal target

Fixed incorrect identifier of import binding for module externals

Fixed when defer import and dynamic default export mixed

Reduce generated output when globalThis supported

Fixed loading async modules in defer import

Reexport module for default import when no used exports for systemjs library

Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id

Handle __dirname and __filename for ES modules

Rename single nested __webpack_export__ and __webpack_require__ in already bundled code

[Types] webpack function type

[Types] NormalModule type

[Types] Multi compiler configuration type

[Types] Fixed regression in custom hashDigest type

[CSS] No extra runtime for initial chunk

[CSS] Fixed a lot of CSS modules bugs

Commits

e021948 chore(release): 5.103.0
1dc6967 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#20130)
077417f fix(css): many css modules bugs (#20129)
7722518 chore: fix script (#20128)
688a7f9 test: no runtime requirements for module library (#20127)
04fe5a1 refactor: pkg.pr.new publish (#20093)
27c05c7 fix: return to namespace import when the external request includes a specific...
067cc60 refactor: no runtime requirements for module library (#20096)
d4208ba fix: delay HMR accept dependencies to preserve import attributes (#20124)
102e1a4 feat(css): added css-style-sheet to exportType for CSSStyleSheet return (#20104)
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
cypress	[>= 9.a, < 10]
cypress	[>= 10.a, < 11]
eslint-plugin-jsdoc	[>= 39.6.a, < 39.7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.24.0` | `10.26.0` | | [@storybook/cli](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli-storybook) | `10.0.6` | `10.0.8` | | [cypress](https://github.com/cypress-io/cypress) | `15.6.0` | `15.7.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `61.1.12` | `61.3.0` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.4` | `5.6.5` | | [mjml](https://github.com/mjmlio/mjml/tree/HEAD/packages/mjml) | `4.16.1` | `4.17.1` | | [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.103.0` | Updates `@sentry/react` from 10.24.0 to 10.26.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.24.0...10.26.0) Updates `@storybook/cli` from 10.0.6 to 10.0.8 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.0.8/code/lib/cli-storybook) Updates `cypress` from 15.6.0 to 15.7.0 - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](cypress-io/cypress@v15.6.0...v15.7.0) Updates `eslint-plugin-jsdoc` from 61.1.12 to 61.3.0 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Changelog](https://github.com/gajus/eslint-plugin-jsdoc/blob/main/.releaserc) - [Commits](gajus/eslint-plugin-jsdoc@v61.1.12...v61.3.0) Updates `html-webpack-plugin` from 5.6.4 to 5.6.5 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.6.4...v5.6.5) Updates `mjml` from 4.16.1 to 4.17.1 - [Release notes](https://github.com/mjmlio/mjml/releases) - [Commits](https://github.com/mjmlio/mjml/commits/v4.17.1/packages/mjml) Updates `webpack` from 5.102.1 to 5.103.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.102.1...v5.103.0) --- updated-dependencies: - dependency-name: "@sentry/react" dependency-version: 10.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: "@storybook/cli" dependency-version: 10.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe - dependency-name: cypress dependency-version: 15.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe - dependency-name: eslint-plugin-jsdoc dependency-version: 61.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe - dependency-name: html-webpack-plugin dependency-version: 5.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe - dependency-name: mjml dependency-version: 4.17.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe - dependency-name: webpack dependency-version: 5.103.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner November 20, 2025 14:13

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 20, 2025

dependabot Bot requested a review from mjamescompton November 20, 2025 14:13

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 20, 2025

mjamescompton approved these changes Nov 20, 2025

View reviewed changes

mjamescompton merged commit 60e7e17 into v3.35 Nov 20, 2025
13 checks passed

mjamescompton deleted the dependabot/npm_and_yarn/safe-cb38de3858 branch November 20, 2025 14:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

dev: bump the safe group across 1 directory with 7 updates#7766

dev: bump the safe group across 1 directory with 7 updates#7766
mjamescompton merged 1 commit into
v3.35from
dependabot/npm_and_yarn/safe-cb38de3858

dependabot Bot commented on behalf of github Nov 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 20, 2025

10.26.0

Important Changes

Other Changes

10.26.0

Important Changes

Other Changes

v10.0.8

10.0.8

v10.0.7

10.0.7

10.0.8

10.0.7

v15.7.0

v61.3.0

61.3.0 (2025-11-19)

Features

v61.2.1

61.2.1 (2025-11-13)

Bug Fixes

v61.2.0

61.2.0 (2025-11-12)

Features

5.6.5 (2025-11-18)

Bug Fixes

v4.17.1

What's Changed

Fixes

v4.17.0

What's Changed

Features

Fixes

Documentation

Other

New Contributors

v5.103.0

Features

Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant