Skip to content

Update CI dependencies (master)#12604

Merged
renovate[bot] merged 2 commits intomasterfrom
renovate/master-ci-dependencies
Feb 3, 2026
Merged

Update CI dependencies (master)#12604
renovate[bot] merged 2 commits intomasterfrom
renovate/master-ci-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 1, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@sentry/browser (source) 10.32.1 → 10.38.0 age confidence devDependencies minor
astral-sh/ruff-pre-commit v0.14.10 → v0.14.14 age confidence repository patch
css-loader 7.1.2 → 7.1.3 age confidence devDependencies patch
eslint-plugin-storybook (source) 10.1.11 → 10.2.4 age confidence devDependencies minor
html-webpack-plugin 5.6.5 → 5.6.6 age confidence devDependencies patch
mini-css-extract-plugin 2.9.4 → 2.10.0 age confidence devDependencies minor
poetry (changelog) 2.2.1 → 2.3.2 age confidence minor
poetry (changelog) ==2.2.1 → ==2.3.2 age confidence minor
prettier (source) 3.7.4 → 3.8.1 age confidence minor
python-jsonschema/check-jsonschema 0.36.0 → 0.36.1 age confidence repository patch
renovatebot/pre-commit-hooks 43.0.6 → 43.2.4 age confidence repository minor
ruff (source, changelog) 0.14.10 → 0.14.14 age confidence patch
ruff (source, changelog) 0.14.10 → 0.14.14 age confidence dependencies patch
ruff (source, changelog) 0.14.10 → 0.14.14 age confidence dev-dependencies patch
sass 1.97.1 → 1.97.3 age confidence devDependencies patch
terser (source) 5.44.1 → 5.46.0 age confidence devDependencies minor
webpack-dev-server 5.2.2 → 5.2.3 age confidence devDependencies patch

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

getsentry/sentry-javascript (@​sentry/browser)

v10.38.0

Compare Source

Important Changes

  • feat(tanstackstart-react): Auto-instrument request middleware (#​18989)

    The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes
  • feat: Use v4.8.0 bundler plugins (#​18993)
  • feat(browser): Add logs.metrics bundle (#​19020)
  • feat(browser): Add replay.logs.metrics bundle (#​19021)
  • feat(browser): Add tracing.replay.logs.metrics bundle (#​19039)
  • feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#​19042)
  • feat(node): Add AI manual instrumentation exports to Node (#​19063)
  • feat(wasm): initialised sentryWasmImages for webworkers (#​18812)
  • fix(core): Classify custom AggregateErrors as exception groups (#​19053)
  • fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#​19010)
  • fix(react): Avoid String(key) to fix Symbol conversion error (#​18982)
  • fix(react): Prevent lazy route handlers from updating wrong navigation span (#​18898)
Internal Changes - feat(deps-dev): bump @​types/rsvp from 4.0.4 to 4.0.9 ([#​19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#​19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#​19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#​19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#​19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#​19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#​19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#​19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#​19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @​edge-runtime/types from 3.0.1 to 4.0.0 ([#​19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @​vercel/nft from 0.29.4 to 1.3.0 ([#​19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @​actions/artifact from 2.1.11 to 5.0.3 ([#​19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#​19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#​19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#​19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#​19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @​remix-run deps to 2.17.4 ([#​19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#​19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#​19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#​19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @​react-router/node, @​react-router/serve, @​react-router/dev to 7.13.0 ([#​19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#​19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#​18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#​19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#​18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @​remix-run/router to ^1.23.2 ([#​19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @​solidjs/start ([#​19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#​19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#​19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @​harshit078. Thank you for your contribution!

v10.37.0

Compare Source

Important Changes

  • feat(core): Introduces a new Sentry.setConversationId() API to track multi turn AI conversations across API calls. (#​18909)

    You can now set a conversation ID that will be automatically applied to spans within that scope. This allows you to link traces from the same conversation together.

    import * as Sentry from '@​sentry/node';

// Set conversation ID for all subsequent spans
Sentry.setConversationId('conv_abc123');

// All AI spans will now include the gen_ai.conversation.id attribute
await openai.chat.completions.create({...});

    This is particularly useful for tracking multiple AI API calls that are part of the same conversation, allowing you to analyze entire conversation flows in Sentry.
    The conversation ID is stored on the isolation scope and automatically applied to spans via the new conversationIdIntegration.

  • feat(tanstackstart-react): Auto-instrument global middleware in sentryTanstackStart Vite plugin (#​18844)

    The sentryTanstackStart Vite plugin now automatically instruments requestMiddleware and functionMiddleware arrays in createStart(). This captures performance data without requiring manual wrapping.

    Auto-instrumentation is enabled by default. To disable it:

    // vite.config.ts
sentryTanstackStart({
  authToken: process.env.SENTRY_AUTH_TOKEN,
  org: 'your-org',
  project: 'your-project',
  autoInstrumentMiddleware: false,
});
Other Changes
  • feat(core): simplify truncation logic to only keep the newest message (#​18906)
  • feat(core): Support new client discard reason invalid (#​18901)
  • feat(deps): Bump OpenTelemetry instrumentations (#​18934)
  • feat(nextjs): Update default ignore list for sourcemaps (#​18938)
  • feat(node): pass prisma instrumentation options through (#​18900)
  • feat(nuxt): Don't run source maps related code on Nuxt "prepare" (#​18936)
  • feat(replay): Update client report discard reason for invalid sessions (#​18796)
  • feat(winston): Add customLevelMap for winston transport (#​18922)
  • feat(react-router): Add support for React Router instrumentation API (#​18580)
  • fix(astro): Do not show warnings for valid options (#​18947)
  • fix(core): Report well known values in gen_ai.operation.name attribute (#​18925)
  • fix(node-core): ignore vercel AbortError by default on unhandled rejection (#​18973)
  • fix(nuxt): include sentry.config.server.ts in nuxt app types (#​18971)
  • fix(profiling): Add platform to envelope item header (#​18954)
  • fix(react): Defer React Router span finalization until lazy routes load (#​18881)
  • ref(core): rename gen_ai.input.messages.original_length to sentry.sdk_meta.gen_ai.input.messages.original_length (#​18970)
  • ref(core): rename gen_ai.request.messages to gen_ai.input.messages (#​18944)
  • ref(core): Set system message as separate attribute (#​18978)
  • deps: Bump version of sentry-bundler-plugins (#​18972)
Internal Changes
  • chore(e2e): Add e2e claude skill (#​18957)
  • chore(e2e): Add Makefile to make running specific e2e test apps easier (#​18953)
  • chore(e2e): Modify e2e skill to also account for untracked files (#​18959)
  • ref(tests): use constants in ai integration tests and add missing ones (#​18945)
  • test(nextjs): Added nextjs CF workers test app (#​18928)
  • test(prisma): Move to yarn prisma (#​18975)

Work in this release was contributed by @​sebws, @​harshit078, and @​fedetorre. Thank you for your contributions!

v10.36.0

Compare Source

v10.35.0

Compare Source

Important Changes

  • feat(tanstackstart-react): Add sentryTanstackStart vite plugin to manage automatic source map uploads (#​18712)

    You can now configure source maps upload for TanStack Start using the sentryTanstackStart Vite plugin:

    // vite.config.ts
import { defineConfig } from 'vite';
import { sentryTanstackStart } from '@​sentry/tanstackstart-react';
import { tanstackStart } from '@​tanstack/react-start/plugin/vite';

export default defineConfig({
  plugins: [
    sentryTanstackStart({
      authToken: process.env.SENTRY_AUTH_TOKEN,
      org: 'your-org',
      project: 'your-project',
    }),
    tanstackStart(),
  ],
});
Other Changes
  • feat(browser): Add CDN bundle for tracing.replay.feedback.logs.metrics (#​18785)
  • feat(browser): Add shim package for logs (#​18831)
  • feat(cloudflare): Automatically set the release id when CF_VERSION_METADATA is enabled (#​18855)
  • feat(core): Add ignored client report event drop reason (#​18815)
  • feat(logs): Add Log exports to browser and node packages (#​18857)
  • feat(node-core,bun): Export processSessionIntegration from node-core and add it to bun (#​18852)
  • fix(core): Find the correct IP address regardless their case (#​18880)
  • fix(core): Check for AI operation id to detect a vercelai span (#​18823)
  • fix(ember): Use ES5 syntax in inline vendor scripts (#​18858)
  • fix(fetch): Shallow-clone fetch options to prevent mutation (#​18867)
Internal Changes
  • chore(ci): Use javascript-sdk-gitflow app instead of personal token (#​18829)
  • chore(deps): Bump @sveltejs/kit devDependency to 2.49.5 (#​18848)
  • chore(deps): Bump bundler plugins to ^4.6.2 (#​18822)
  • chore(deps): bump hono from 4.10.3 to 4.11.4 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#​18806)
  • chore(test): Bump svelte dependencies (#​18850)
  • chore(core): Comment out Error tests in langchain (#​18837)
  • meta(changelog): Fix entry for tanstack start vite plugin (#​18883)
  • test(e2e): Add testing app for User Feedback (#​18877)
  • test(fastify): Verify if upstream error is fixed and won't regress (#​18838)

Work in this release was contributed by @​rreckonerr. Thank you for your contribution!

v10.34.0

Compare Source

v10.33.0

Compare Source

Important Changes

  • feat(core): Apply scope attributes to metrics (#​18738)

    You can now set attributes on the SDK's scopes which will be applied to all metrics as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.

    Sentry.getGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });

Sentry.withScope(scope => {
  scope.setAttribute('step', 'authentication');

  // scope attributes `is_admin`, `auth_provider` and `step` are added
  Sentry.metrics.count('clicks', 1, { attributes: { activeSince: 100 } });
  Sentry.metrics.gauge('timeSinceRefresh', 4, { unit: 'hour' });
});

// scope attributes `is_admin` and `auth_provider` are added
Sentry.metrics.count('response_time', 283.33, { unit: 'millisecond' });

  • feat(tracing): Add Vercel AI SDK v6 support (#​18741)

    The Sentry SDK now supports the Vercel AI SDK v6. Tracing and error monitoring will work automatically with the new version.

  • feat(wasm): Add applicationKey option for third-party error filtering (#​18762)

    Adds support for applying an application key to WASM stack frames that can be then used in the thirdPartyErrorFilterIntegration for detection of first-party code.

    Usage:

    Sentry.init({
  integrations: [
    // Integration order matters: wasmIntegration needs to be before thirdPartyErrorFilterIntegration
    wasmIntegration({ applicationKey: 'your-custom-application-key' }), ←───┐
    thirdPartyErrorFilterIntegration({                                      │
      behaviour: 'drop-error-if-exclusively-contains-third-party-frames',   ├─ matching keys
      filterKeys: ['your-custom-application-key'] ←─────────────────────────┘
    }),
  ],
});
Other Changes
  • feat(cloudflare): Support propagateTraceparent (#​18569)
  • feat(core): Add ignoreSentryInternalFrames option to thirdPartyErrorFilterIntegration (#​18632)
  • feat(core): Add gen_ai.conversation.id attribute to OpenAI and LangGr… (#​18703)
  • feat(core): Add recordInputs/recordOutputs options to MCP server wrapper (#​18600)
  • feat(core): Support IPv6 hosts in the DSN (#​2996) (#​17708)
  • feat(deps): Bump bundler plugins to ^4.6.1 (#​17980)
  • feat(nextjs): Emit warning for conflicting treeshaking / debug settings (#​18638)
  • feat(nextjs): Print Turbopack note for deprecated webpack options (#​18769)
  • feat(node-core): Add isolateTrace option to node-cron instrumentation (#​18416)
  • feat(node): Use process.on('SIGTERM') for flushing in Vercel functions (#​17583)
  • feat(nuxt): Detect development environment and add dev E2E test (#​18671)
  • fix(browser): Forward worker metadata for third-party error filtering (#​18756)
  • fix(browser): Reduce number of visibilitystate and pagehide listeners (#​18581)
  • fix(browser): Respect tunnel in diagnoseSdkConnectivity (#​18616)
  • fix(cloudflare): Consume body of fetch in the Cloudflare transport (#​18545)
  • fix(core): Set op on ended Vercel AI spans (#​18601)
  • fix(core): Subtract performance.now() from browserPerformanceTimeOrigin fallback (#​18715)
  • fix(core): Update client options to allow explicit undefined (#​18024)
  • fix(feedback): Fix cases where the outline of inputs were wrong (#​18647)
  • fix(next): Ensure inline sourcemaps are generated for wrapped modules in Dev (#​18640)
  • fix(next): Wrap all Random APIs with a safe runner (#​18700)
  • fix(nextjs): Avoid Edge build warning from OpenTelemetry process.argv0 (#​18759)
  • fix(nextjs): Remove polynomial regular expression (#​18725)
  • fix(node-core): Ignore worker threads in OnUncaughtException (#​18689)
  • fix(node): relax Fastify's setupFastifyErrorHandler argument type (#​18620)
  • fix(nuxt): Allow overwriting server-side defaultIntegrations (#​18717)
  • fix(pino): Allow custom namespaces for msg and err (#​18597)
  • fix(react,solid,vue): Fix parametrization behavior for non-matched routes (#​18735)
  • fix(replay): Ensure replays contain canvas rendering when resumed after inactivity (#​18714)
  • fix(tracing): add gen_ai.request.messages.original_length attributes (#​18608)
  • ref(nextjs): Drop resolve dependency (#​18618)
  • ref(react-router): Use snake_case for span op names (#​18617)
Internal Changes
  • chore(bun): Fix install-bun.js version check and improve upgrade feedback (#​18492)
  • chore(changelog): Fix typo (#​18648)
  • chore(craft): Use version templating for aws layer (#​18675)
  • chore(deps): Bump IITM to ^2.0.1 (#​18599)
  • chore(e2e-tests): Upgrade @trpc/server and @trpc/client (#​18722)
  • chore(e2e): Unpin react-router-7-framework-spa to ^7.11.0 (#​18551)
  • chore(nextjs): Bump next version in dev deps (#​18661)
  • chore(node-tests): Upgrade @langchain/core (#​18720)
  • chore(react): Inline hoist-non-react-statics package (#​18102)
  • chore(size-limit): Add size checks for metrics and logs (#​18573)
  • chore(tests): Add unordered mode to cloudflare test runner (#​18596)
  • ci(deps): bump actions/cache from 4 to 5 (#​18654)
  • ci(deps): Bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#​18656)
  • ci(deps): bump actions/upload-artifact from 5 to 6 (#​18655)
  • ci(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (#​18657)
  • doc: E2E testing documentation updates (#​18649)
  • ref(core): Extract and reuse getCombinedScopeData helper (#​18585)
  • ref(core): Remove dependence between performance.timeOrigin and performance.timing.navigationStart (#​18710)
  • ref(core): Streamline and test browserPerformanceTimeOrigin (#​18708)
  • ref(core): Strengthen browserPerformanceTimeOrigin reliability check (#​18719)
  • ref(core): Use serializeAttributes for metric attribute serialization (#​18582)
  • ref(node): Remove duplicate function isCjs (#​18662)
  • test(core): Improve unit test performance for offline transport tests (#​18628)
  • test(core): Use fake timers in promisebuffer tests to ensure deterministic behavior (#​18659)
  • test(e2e): Add e2e metrics tests in Next.js 16 (#​18643)
  • test(e2e): Pin agents package in cloudflare-mcp test (#​18609)
  • test(e2e): Pin solid/vue tanstack router to 1.41.8 (#​18610)
  • test(nestjs): Add canary test for latest (#​18685)
  • test(node-native): Increase worker block timeout (#​18683)
  • test(nuxt): Fix nuxt-4 dev E2E test (#​18737)
  • test(tanstackstart-react): Add canary test for latest (#​18686)
  • test(vue): Added canary and latest test variants to Vue tests (#​18681)

Work in this release was contributed by @​G-Rath, @​gianpaj, @​maximepvrt, @​Mohataseem89, @​sebws, and @​xgedev. Thank you for your contributions!

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.14.14

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.14

v0.14.13

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.13

v0.14.12

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.12

v0.14.11

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.11

webpack/css-loader (css-loader)

v7.1.3

Compare Source

storybookjs/storybook (eslint-plugin-storybook)

v10.2.4

Compare Source

v10.2.3

Compare Source

v10.2.2

Compare Source

v10.2.1

Compare Source

v10.2.0

Compare Source

Improved UI and story authoring ergonomics

Storybook 10.2 contains hundreds of fixes and improvement including:

  • 💅 New Viewports and Zoom UI
  • 🏭 Typesafe CSF factories for Vue, Angular, Web Components (preview)
  • 📄 MDX support for Storybook MCP (experimental)
List of all updates

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month,on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Update the dependencies label Feb 1, 2026
@renovate renovate bot enabled auto-merge (squash) February 1, 2026 00:59
@renovate renovate bot force-pushed the renovate/master-ci-dependencies branch from 4fd47e3 to d46bba8 Compare February 3, 2026 14:28
@geo-ghci-int
Apply pre-commit fix
eca9b6b 
From the artifact of the previous workflow run
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Feb 3, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot merged commit b5a6fd9 into master Feb 3, 2026
22 checks passed
@renovate renovate bot deleted the renovate/master-ci-dependencies branch February 3, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Update the dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants