⬆️(deps): Bump the security-updates group across 1 directory with 3 updates #36

dependabot · 2026-01-19T10:01:19Z

Bumps the security-updates group with 3 updates in the / directory: @sentry/nextjs, contentful and shadcn.

Updates @sentry/nextjs from 10.32.1 to 10.34.0

Release notes

Sourced from @sentry/nextjs's releases.

10.34.0

Important Changes
feat(core): Add option to enhance the fetch error message (#18466)

You can now enable enhanced fetch error messages by setting the enhancedFetchErrorMessage option. When enabled, the SDK will include additional context in fetch error messages to help with debugging.

feat(nextjs): Add routeManifestInjection option to exclude routes from client bundle (#18798)

A new routeManifestInjection option allows you to exclude sensitive routes from being injected into the client bundle.
feat(tanstackstart-react): Add wrapMiddlewaresWithSentry for manual middleware instrumentation (#18680)

You can now wrap your middlewares using wrapMiddlewaresWithSentry, allowing you to trace middleware execution in your TanStack Start application.
import { createMiddleware } from '@tanstack/react-start';
import { wrapMiddlewaresWithSentry } from '@sentry/tanstackstart-react';
const loggingMiddleware = createMiddleware({ type: 'function' }).server(async ({ next }) => {
console.log('Request started');
return next();
});
export const [wrappedLoggingMiddleware] = wrapMiddlewaresWithSentry({ loggingMiddleware });
Other Changes

feat(browser): Add CDN bundle for tracing.logs.metrics (#18784)

feat(core,node-core): Consolidate bun and node types with ServerRuntimeOptions (#18734)

feat(nextjs): Remove tracing from generation function template (#18733)

fix(core): Don't record outcomes for failed client reports (#18808)

fix(deno,cloudflare): Prioritize name from params over name from options (#18800)

fix(web-vitals): Add error handling for invalid object keys in WeakMap (#18809)

ref(nextjs): Split withSentryConfig (#18777)

test(e2e): Pin @shopify/remix-oxygen to unblock ci (#18811)

Bundle size 📦

Path Size

@sentry/browser 24.52 KB

@sentry/browser - with treeshaking flags 23.06 KB

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.34.0

Important Changes
feat(core): Add option to enhance the fetch error message (#18466)

You can now enable enhanced fetch error messages by setting the enhancedFetchErrorMessage option. When enabled, the SDK will include additional context in fetch error messages to help with debugging.

feat(nextjs): Add routeManifestInjection option to exclude routes from client bundle (#18798)

A new routeManifestInjection option allows you to exclude sensitive routes from being injected into the client bundle.
feat(tanstackstart-react): Add wrapMiddlewaresWithSentry for manual middleware instrumentation (#18680)

You can now wrap your middlewares using wrapMiddlewaresWithSentry, allowing you to trace middleware execution in your TanStack Start application.
import { createMiddleware } from '@tanstack/react-start';
import { wrapMiddlewaresWithSentry } from '@sentry/tanstackstart-react';
const loggingMiddleware = createMiddleware({ type: 'function' }).server(async ({ next }) => {
console.log('Request started');
return next();
});
export const [wrappedLoggingMiddleware] = wrapMiddlewaresWithSentry({ loggingMiddleware });
Other Changes

feat(browser): Add CDN bundle for tracing.logs.metrics (#18784)

feat(core,node-core): Consolidate bun and node types with ServerRuntimeOptions (#18734)

feat(nextjs): Remove tracing from generation function template (#18733)

fix(core): Don't record outcomes for failed client reports (#18808)

fix(deno,cloudflare): Prioritize name from params over name from options (#18800)

fix(web-vitals): Add error handling for invalid object keys in WeakMap (#18809)

ref(nextjs): Split withSentryConfig (#18777)

test(e2e): Pin @shopify/remix-oxygen to unblock ci (#18811)

10.33.0

Important Changes

feat(core): Apply scope attributes to metrics (#18738)

... (truncated)

Commits

9f6388e release: 10.34.0
22f80b8 Merge pull request #18820 from getsentry/prepare-release/10.34.0
f9e4fc1 meta(changelog): Update changelog for 10.34.0
5da93d8 feat(nextjs): Add routeManifestInjection option to exclude routes from client...
419a0e6 feat(browser): Add CDN bundle for tracing.logs.metrics (#18784)
ad3dd01 fix(core): Don't record outcomes for failed client reports (#18808)
7a975c9 fix(web-vitals): Add error handling for invalid object keys in WeakMap (#18...
ca02322 test(e2e): Pin @shopify/remix-oxygen to unblock ci (#18811)
6903407 fix(deno,cloudflare): Prioritize name from params over name from options (#18...
d350c81 feat(core,node-core): Consolidate bun and node types with ServerRuntimeOption...
Additional commits viewable in compare view

Updates contentful from 11.10.1 to 11.10.2

Release notes

Sourced from contentful's releases.

v11.10.2

11.10.2 (2026-01-12)

Bug Fixes

update sdk-core to bump qs dep [DX-663] (#2628) (b4b32f0)

Commits

b4b32f0 fix: update sdk-core to bump qs dep [DX-663] (#2628)
a5df9e5 build(deps): bump qs from 6.13.0 to 6.14.1 (#2624)
6c0d5af build(deps): bump @contentful/content-source-maps (#2623)
c3ed11a chore: [SECURITY-1357] refine condition for dependabot approval in workflow (...
See full diff in compare view

Updates shadcn from 3.6.2 to 3.7.0

Release notes

Sourced from shadcn's releases.

shadcn@3.7.0

Minor Changes

#9156 66d24007849ca34c18a5c28b55f2d8dac29ce1e0 Thanks @nrjdalal! - add remix icons

#9351 682c98989d28971a04382da1f174b970fff91d92 Thanks @shadcn! - add registry add command

shadcn@3.6.3

Patch Changes

#9161 f2583391eafc22a6ec6c9299a8ad9fac857f8181 Thanks @yeasin2002! - validate app name on create

#8422 c2fd847d65bfccde531cf1b4462ae466446efa06 Thanks @aquaticcalf! - add mcp support for opencode

Changelog

Sourced from shadcn's changelog.

3.7.0

Minor Changes

#9156 66d24007849ca34c18a5c28b55f2d8dac29ce1e0 Thanks @nrjdalal! - add remix icons

#9351 682c98989d28971a04382da1f174b970fff91d92 Thanks @shadcn! - add registry add command

3.6.3

Patch Changes

#9161 f2583391eafc22a6ec6c9299a8ad9fac857f8181 Thanks @yeasin2002! - validate app name on create

#8422 c2fd847d65bfccde531cf1b4462ae466446efa06 Thanks @aquaticcalf! - add mcp support for opencode

Commits

1e9e337 chore(release): version packages (#9352)
66d2400 feat(icons): the icons we all love and adore - remixicon (#9156)
682c989 feat: registry add command (#9351)
8fcfc56 chore(release): version packages (#9283)
f258339 fix(cli): validate project name using npm package name rules (#9161)
c2fd847 feat: add OpenCode MCP client support (#8422)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the security-updates group with 3 updates in the / directory: [@sentry/nextjs](https://github.com/getsentry/sentry-javascript), [contentful](https://github.com/contentful/contentful.js) and [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn). Updates `@sentry/nextjs` from 10.32.1 to 10.34.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.32.1...10.34.0) Updates `contentful` from 11.10.1 to 11.10.2 - [Release notes](https://github.com/contentful/contentful.js/releases) - [Commits](contentful/contentful.js@v11.10.1...v11.10.2) Updates `shadcn` from 3.6.2 to 3.7.0 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@3.7.0/packages/shadcn) --- updated-dependencies: - dependency-name: "@sentry/nextjs" dependency-version: 10.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: contentful dependency-version: 11.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: shadcn dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot assigned zachlagden Jan 19, 2026

dependabot bot added dependencies npm labels Jan 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

⬆️(deps): Bump the security-updates group across 1 directory with 3 updates #36

⬆️(deps): Bump the security-updates group across 1 directory with 3 updates #36

Uh oh!

dependabot bot commented on behalf of github Jan 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Path	Size
`@sentry/browser`	24.52 KB
`@sentry/browser` - with treeshaking flags	23.06 KB

⬆️(deps): Bump the security-updates group across 1 directory with 3 updates #36

Are you sure you want to change the base?

⬆️(deps): Bump the security-updates group across 1 directory with 3 updates #36

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 19, 2026

10.34.0

Important Changes

Other Changes

Bundle size 📦

10.34.0

Important Changes

Other Changes

10.33.0

Important Changes

v11.10.2

11.10.2 (2026-01-12)

Bug Fixes

shadcn@3.7.0

Minor Changes

shadcn@3.6.3

Patch Changes

3.7.0

Minor Changes

3.6.3

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants