Skip to content

chore(deps): update services and utilities minor and patch updates#214

Merged
ryansavara merged 1 commit intostagingfrom
renovate/services-and-utilities-minor-and-patch-updates
Mar 9, 2026
Merged

chore(deps): update services and utilities minor and patch updates#214
ryansavara merged 1 commit intostagingfrom
renovate/services-and-utilities-minor-and-patch-updates

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 23, 2026

This PR contains the following updates:

Package Change Age Confidence
@sentry/node (source) 10.34.010.39.0 age confidence
axios (source) 1.13.21.13.5 age confidence
isomorphic-dompurify 2.35.02.36.0 age confidence
nodemailer (source) 7.0.127.0.13 age confidence

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v10.39.0

Compare Source

Important Changes
  • feat(tanstackstart-react): Auto-instrument server function middleware (#​19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#​19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#​18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @​sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@​sentry/node-core/light';
    
    Sentry.init({
      dsn: '__DSN__',
    });
Other Changes
  • feat(browser): Add mode option for the browser session integration (#​18997)
  • feat(browser): Include culture context with events (#​19148)
  • feat(browser): Trace continuation from server-timing headers (#​18673)
  • feat(core,cloudflare): Enable certain fields with env variables (#​19245)
  • feat(deps): bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 (#​19149)
  • feat(deps): bump @​sentry/bundler-plugin-core from 4.8.0 to 4.9.0 (#​19190)
  • feat(deps): Bump glob in @sentry/react-router (#​19162)
  • feat(deps): bump hono from 4.11.1 to 4.11.7 (#​19068)
  • feat(hono): Add base for Sentry Hono middleware (Cloudflare) (#​18787)
  • feat(nextjs): Set cloudflare runtime (#​19084)
  • feat(node-core): Add outgoing fetch trace propagation to light mode (#​19262)
  • feat(react): Add lazyRouteManifest option to resolve lazy-route names (#​19086)
  • feat(vercel-ai): Add rerank support and fix token attribute mapping (#​19144)
  • fix(core): Avoid blocking the process for weightBasedFlushing (#​19174)
  • fix(core): Avoid blocking the process when calling flush on empty buffer (#​19062)
  • fix(core): Ensure partially set SDK metadata options are preserved (#​19102)
  • fix(core): Fix truncation to only keep last message in vercel (#​19080)
  • fix(core): Intercept .withResponse() to preserve OpenAI stream instrumentation (#​19122)
  • fix(core): Prevent infinite recursion when event processor throws (#​19110)
  • fix(core): Record client report with reason for HTTP 413 responses (#​19093)
  • fix(core): Remove outdated _experiments.enableMetrics references from metrics JSDoc (#​19252)
  • fix(core): Respect event.event_id in scope.captureEvent return value (#​19113)
  • fix(core): use sessionId for MCP transport correlation (#​19172)
  • fix(deps): Bump @nestjs/platform-express to 11.1.13 (#​19206)
  • fix(deps): Bump diff to 5.2.2 (#​19228)
  • fix(deps): Bump js-yaml to 3.14.2 and 4.1.1 (#​19216)
  • fix(deps): Bump lodash to 4.17.23 (#​19211)
  • fix(deps): Bump mdast-util-to-hast to 13.2.1 (#​19205)
  • fix(deps): Bump node-forge to 1.3.2 (#​19183)
  • fix(deps): Bump react-router to 6.30.3 (#​19212)
  • fix(deps): Bump sinon to 21.0.1 in @sentry/ember (#​19246)
  • fix(deps): Bump vite to 5.4.21 (#​19214)
  • fix(nextjs): Expose an event id when captureUnderscoreErrorException captures an exception (#​19185)
  • fix(nextjs): Populate SENTRY_SERVER_MODULES in Turbopack (#​19231)
  • fix(node): Use snake_case for Fastify's request-handler op. (#​18729)
  • fix(nuxt): Avoid logging database skip warning when debug is disabled (#​19095)
  • fix(nuxt): Respect configured environment settings (#​19243)
  • fix(profiling-node): 137 ABI should not be pruned for node 24 (#​19236)
  • fix(replay): Improve error messages when compression worker fails to load (#​19008)
  • fix(svelte): Bump svelte dev dependency to 3.59.2 (#​19208)
  • fix(sveltekit): Detect used adapter via svelte.config.js (#​19270)
  • fix(tanstackstart-react): Use auto.middleware.tanstackstart as middleware trace origin (#​19137)
  • ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#​19254)
  • ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#​19258)
  • ref(sveltekit): Use untrack to read route id without invalidation (#​19272)
Internal Changes
  • chore: Add cursor rules for AI integrations contributions (#​19167)
  • chore: Add Makefiles for dev-packages to make it convenient to run tests (#​19203)
  • chore: bump prettier to 3.8 (#​19198)
  • chore(bugbot): Add rule to flag not-unref'd timers (#​19082)
  • chore(deps-dev): bump @​sveltejs/kit from 2.49.5 to 2.50.1 (#​19089)
  • chore(deps-dev): bump ts-node from 10.9.1 to 10.9.2 (#​19189)
  • chore(deps-dev): bump vite from 3.2.11 to 5.4.21 (#​19227)
  • chore(deps-dev): bump webpack from 5.95.0 to 5.104.1 (#​19199)
  • chore(deps-dev): bump yaml from 2.2.2 to 2.8.2 (#​19087)
  • chore(deps): Bump Apollo Server from v3 to v5 in integration tests (#​19202)
  • chore(deps): Bump express in test utils + e2e apps (#​19159)
  • chore(deps): Bump Lerna to v9 (#​19244)
  • chore(deps): Bump mongoose in integration tests (#​19175)
  • chore(deps): Bump solidjs to 1.9.11 to fix seroval alerts (#​19150)
  • chore(deps): Bump webpack from 5.97.0 to 5.104.0 in ember-classic e2e test (#​19239)
  • chore(deps): Bump webpack from 5.104.0 to 5.104.1 in ember-classic e2e test (#​19247)
  • chore(e2e): Add banner to readme (#​19138)
  • chore(llm): Add skill for fixing security vulnerabilities (#​19178)
  • chore(node-core): Fix node-core integration test assertions (#​19219)
  • ci: Ignore ticket creation for base branches other than develop/master (#​19103)
  • ci(e2e): Remove nextjs-turbo canary tests (#​19118)
  • ref: Removes unused eslint rule (via yarn fix) (#​19266)
  • test(e2e): Bump nextjs-t3 to next 15 (#​19130)
  • test(e2e): Migrate test app nextjs-turbo into nextjs-15 (#​19107)

Work in this release was contributed by @​limbonaut and @​rfoel. Thank you for your contributions!

v10.38.0

Compare Source

Important Changes
  • feat(tanstackstart-react): Auto-instrument request middleware (#​18989)

    The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes
  • feat: Use v4.8.0 bundler plugins (#​18993)
  • feat(browser): Add logs.metrics bundle (#​19020)
  • feat(browser): Add replay.logs.metrics bundle (#​19021)
  • feat(browser): Add tracing.replay.logs.metrics bundle (#​19039)
  • feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#​19042)
  • feat(node): Add AI manual instrumentation exports to Node (#​19063)
  • feat(wasm): initialised sentryWasmImages for webworkers (#​18812)
  • fix(core): Classify custom AggregateErrors as exception groups (#​19053)
  • fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#​19010)
  • fix(react): Avoid String(key) to fix Symbol conversion error (#​18982)
  • fix(react): Prevent lazy route handlers from updating wrong navigation span (#​18898)
Internal Changes - feat(deps-dev): bump @​types/rsvp from 4.0.4 to 4.0.9 ([#​19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#​19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#​19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#​19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#​19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#​19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#​19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#​19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#​19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @​edge-runtime/types from 3.0.1 to 4.0.0 ([#​19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @​vercel/nft from 0.29.4 to 1.3.0 ([#​19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @​actions/artifact from 2.1.11 to 5.0.3 ([#​19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#​19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#​19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#​19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#​19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @​remix-run deps to 2.17.4 ([#​19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#​19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#​19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#​19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @​react-router/node, @​react-router/serve, @​react-router/dev to 7.13.0 ([#​19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#​19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#​18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#​19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#​18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @​remix-run/router to ^1.23.2 ([#​19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @​solidjs/start ([#​19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#​19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#​19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @​harshit078. Thank you for your contribution!

v10.37.0

Compare Source

Important Changes
  • feat(core): Introduces a new Sentry.setConversationId() API to track multi turn AI conversations across API calls. (#​18909)

    You can now set a conversation ID that will be automatically applied to spans within that scope. This allows you to link traces from the same conversation together.

    import * as Sentry from '@​sentry/node';
    
    // Set conversation ID for all subsequent spans
    Sentry.setConversationId('conv_abc123');
    
    // All AI spans will now include the gen_ai.conversation.id attribute
    await openai.chat.completions.create({...});

    This is particularly useful for tracking multiple AI API calls that are part of the same conversation, allowing you to analyze entire conversation flows in Sentry.
    The conversation ID is stored on the isolation scope and automatically applied to spans via the new conversationIdIntegration.

  • feat(tanstackstart-react): Auto-instrument global middleware in sentryTanstackStart Vite plugin (#​18844)

    The sentryTanstackStart Vite plugin now automatically instruments requestMiddleware and functionMiddleware arrays in createStart(). This captures performance data without requiring manual wrapping.

    Auto-instrumentation is enabled by default. To disable it:

    // vite.config.ts
    sentryTanstackStart({
      authToken: process.env.SENTRY_AUTH_TOKEN,
      org: 'your-org',
      project: 'your-project',
      autoInstrumentMiddleware: false,
    });
Other Changes
  • feat(core): simplify truncation logic to only keep the newest message (#​18906)
  • feat(core): Support new client discard reason invalid (#​18901)
  • feat(deps): Bump OpenTelemetry instrumentations (#​18934)
  • feat(nextjs): Update default ignore list for sourcemaps (#​18938)
  • feat(node): pass prisma instrumentation options through (#​18900)
  • feat(nuxt): Don't run source maps related code on Nuxt "prepare" (#​18936)
  • feat(replay): Update client report discard reason for invalid sessions (#​18796)
  • feat(winston): Add customLevelMap for winston transport (#​18922)
  • feat(react-router): Add support for React Router instrumentation API (#​18580)
  • fix(astro): Do not show warnings for valid options (#​18947)
  • fix(core): Report well known values in gen_ai.operation.name attribute (#​18925)
  • fix(node-core): ignore vercel AbortError by default on unhandled rejection (#​18973)
  • fix(nuxt): include sentry.config.server.ts in nuxt app types (#​18971)
  • fix(profiling): Add platform to envelope item header (#​18954)
  • fix(react): Defer React Router span finalization until lazy routes load (#​18881)
  • ref(core): rename gen_ai.input.messages.original_length to sentry.sdk_meta.gen_ai.input.messages.original_length (#​18970)
  • ref(core): rename gen_ai.request.messages to gen_ai.input.messages (#​18944)
  • ref(core): Set system message as separate attribute (#​18978)
  • deps: Bump version of sentry-bundler-plugins (#​18972)
Internal Changes
  • chore(e2e): Add e2e claude skill (#​18957)
  • chore(e2e): Add Makefile to make running specific e2e test apps easier (#​18953)
  • chore(e2e): Modify e2e skill to also account for untracked files (#​18959)
  • ref(tests): use constants in ai integration tests and add missing ones (#​18945)
  • test(nextjs): Added nextjs CF workers test app (#​18928)
  • test(prisma): Move to yarn prisma (#​18975)

Work in this release was contributed by @​sebws, @​harshit078, and @​fedetorre. Thank you for your contributions!

v10.36.0

Compare Source

v10.35.0

Compare Source

Important Changes
  • feat(tanstackstart-react): Add sentryTanstackStart vite plugin to manage automatic source map uploads (#​18712)

    You can now configure source maps upload for TanStack Start using the sentryTanstackStart Vite plugin:

    // vite.config.ts
    import { defineConfig } from 'vite';
    import { sentryTanstackStart } from '@​sentry/tanstackstart-react';
    import { tanstackStart } from '@​tanstack/react-start/plugin/vite';
    
    export default defineConfig({
      plugins: [
        sentryTanstackStart({
          authToken: process.env.SENTRY_AUTH_TOKEN,
          org: 'your-org',
          project: 'your-project',
        }),
        tanstackStart(),
      ],
    });
Other Changes
  • feat(browser): Add CDN bundle for tracing.replay.feedback.logs.metrics (#​18785)
  • feat(browser): Add shim package for logs (#​18831)
  • feat(cloudflare): Automatically set the release id when CF_VERSION_METADATA is enabled (#​18855)
  • feat(core): Add ignored client report event drop reason (#​18815)
  • feat(logs): Add Log exports to browser and node packages (#​18857)
  • feat(node-core,bun): Export processSessionIntegration from node-core and add it to bun (#​18852)
  • fix(core): Find the correct IP address regardless their case (#​18880)
  • fix(core): Check for AI operation id to detect a vercelai span (#​18823)
  • fix(ember): Use ES5 syntax in inline vendor scripts (#​18858)
  • fix(fetch): Shallow-clone fetch options to prevent mutation (#​18867)
Internal Changes
  • chore(ci): Use javascript-sdk-gitflow app instead of personal token (#​18829)
  • chore(deps): Bump @sveltejs/kit devDependency to 2.49.5 (#​18848)
  • chore(deps): Bump bundler plugins to ^4.6.2 (#​18822)
  • chore(deps): bump hono from 4.10.3 to 4.11.4 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#​18806)
  • chore(test): Bump svelte dependencies (#​18850)
  • chore(core): Comment out Error tests in langchain (#​18837)
  • meta(changelog): Fix entry for tanstack start vite plugin (#​18883)
  • test(e2e): Add testing app for User Feedback (#​18877)
  • test(fastify): Verify if upstream error is fixed and won't regress (#​18838)

Work in this release was contributed by @​rreckonerr. Thank you for your contribution!

axios/axios (axios)

v1.13.5

Compare Source

Release 1.13.5

Highlights
  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #​7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #​7368)
Changes
Security
  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #​7369)
Fixes
  • Fix/5657. (PR #​7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #​7368)
Features / Improvements
  • Add input validation to isAbsoluteURL. (PR #​7326)
  • Refactor: bump minor package versions. (PR #​7356)
Documentation
  • Clarify object-check comment. (PR #​7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #​7371)
CI / Maintenance
  • Chore: fix issues with YAML. (PR #​7355)
  • CI: update workflow YAMLs. (PR #​7372)
  • CI: fix run condition. (PR #​7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #​7360)
  • Chore(release): prepare release 1.13.5. (PR #​7379)
New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes
  • fix: issues with version 1.13.3 (#​7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release
    • Cleaned up interceptor test files
    • Improved workflow configurations
Infrastructure & CI/CD
  • refactor: ci and build (#​7340) (8ff6c19)

    • Major refactoring of CI/CD workflows
    • Consolidated workflow files for better maintainability
    • Added mise configuration for the development environment
    • Improved sponsor block update automation
    • Enhanced issue and PR templates
    • Added automatic release notes generation
    • Implemented workflow cancellation for concurrent runs
  • chore: codegen and some updates to workflows (76cf77b)

    • Code generation improvements
    • Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

v1.13.3

Compare Source

Bug Fixes
  • http2: Use port 443 for HTTPS connections by default. (#​7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#​6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#​5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#​5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#​7253) (#​7257) (7d19335)
  • turn AxiosError into a native error (#​5394) (#​5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#​5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#​7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#​6314) (6ef867e)
Features
Reverts
Contributors to this release
kkomelin/isomorphic-dompurify (isomorphic-dompurify)

v2.36.0: : Updated jsdom to 28.0.0

Compare Source

Changelog
  • Updated jsdom.

See the complete changelog for more details.

Release

2.36.0

nodemailer/nodemailer (nodemailer)

v7.0.13

Compare Source

Bug Fixes
  • downgrade transient connection error logs to warn level (4c041db)

Configuration

📅 Schedule: Branch creation - Between 10:00 AM and 06:59 PM ( * 10-18 * * * ) in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/services-and-utilities-minor-and-patch-updates branch 3 times, most recently from 468b994 to ff94e49 Compare March 5, 2026 18:56
@renovate renovate bot force-pushed the renovate/services-and-utilities-minor-and-patch-updates branch from ff94e49 to da222a7 Compare March 9, 2026 10:58
@renovate renovate bot force-pushed the renovate/services-and-utilities-minor-and-patch-updates branch from da222a7 to bbdfb92 Compare March 9, 2026 12:27
@ryansavara ryansavara merged commit 1a7e4a8 into staging Mar 9, 2026
3 checks passed
@ryansavara ryansavara deleted the renovate/services-and-utilities-minor-and-patch-updates branch March 9, 2026 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant