fix(deps): update weekly-non-major-updates #195

renovate · 2025-12-29T09:44:33Z

This PR contains the following updates:

Package	Change	Age	Confidence
@casl/ability (source)	`^6.7.3` -> `^6.7.5`
@nestjs/common (source)	`^11.1.9` -> `^11.1.10`
@nestjs/core (source)	`^11.1.9` -> `^11.1.10`
@nestjs/jwt	`^11.0.1` -> `^11.0.2`
@nestjs/platform-express (source)	`^11.1.9` -> `^11.1.10`
@nestjs/testing (source)	`^11.1.9` -> `^11.1.10`
@sentry/node (source)	`^10.28.0` -> `^10.32.1`
@types/node (source)	`^24.10.1` -> `^24.10.4`
@typescript-eslint/eslint-plugin (source)	`^8.48.1` -> `^8.50.1`
@typescript-eslint/parser (source)	`^8.48.1` -> `^8.50.1`
eslint (source)	`^9.39.1` -> `^9.39.2`
prettier (source)	`^3.7.3` -> `^3.7.4`

Release Notes

stalniy/casl (@casl/ability)

`v6.7.5`: @casl/ability: v6.7.5

Compare Source

Bug Fixes

ignores potentially insecure fields in rulesToFields (#1093) (39da920)

nestjs/nest (@nestjs/common)

`v11.1.10`

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

core
- #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
- #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
microservices
- #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
common
- #16077 fix(common): resolve file-type path explicitly (@shash-hq)
- #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

common
- #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
- #16060 feat(common): add message property to file type validator (@Jo-Minseok)
- #16079 fix: enhance ValidationPipe (@liu-jin-yi)
core
- #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
microservices
- #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
common, core
- #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

platform-fastify
- #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
platform-express
- #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
common
- #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

Alexander (@pythonjsgo)
J_Coder (@Jo-Minseok)
Luke Son (@KAPUIST)
Oleh Strokan (@OlegStrokan)
Praveen Somasundaram (@som14062005)
Shashank (@shash-hq)
@chenjieya
@giorgikakauridze
@mag123c
chernomortsev evgeny (@malkovitc)
liu-jin-yi (@liu-jin-yi)

nestjs/jwt (@nestjs/jwt)

`v11.0.2`

Compare Source

What's Changed

fix(deps): update dependency jsonwebtoken to v9.0.3 by @renovate[bot] in #2088

Full Changelog: nestjs/jwt@11.0.1...11.0.2

getsentry/sentry-javascript (@sentry/node)

`v10.32.1`

Compare Source

fix(cloudflare): Add hono transaction name when error is thrown (#18529)
fix(ember): Make implementation field optional (hash routes) (#18564)
fix(vercelai): Fix input token count (#18574)

Internal Changes

chore(lint): prefer 'unknown' to 'any', fix lint warnings
chore(test): Remove cloudflare-astro e2e test (#18567)

`v10.32.0`

Compare Source

Important Changes

feat(core): Apply scope attributes to logs (#18184)

You can now set attributes on the SDK's scopes which will be applied to all logs as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.

Sentry.geGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });

Sentry.withScope(scope => {
  scope.setAttribute('step', 'authentication');

  // scope attributes `is_admin`, `auth_provider` and `step` are added
  Sentry.logger.info(`user ${user.id} logged in`, { activeSince: 100 });
  Sentry.logger.info(`updated ${user.id} last activity`);
});

// scope attributes `is_admin` and `auth_provider` are added
Sentry.logger.warn('stale website version, reloading page');

feat(replay): Add Request body with attachRawBodyFromRequest option (#18501)

To attach the raw request body (from Request objects passed as the first fetch argument) to replay events, you can now use the attachRawBodyFromRequest option in the Replay integration:
```
Sentry.init({
  integrations: [
    Sentry.replayIntegration({
      attachRawBodyFromRequest: true,
    }),
  ],
});
```

feat(tanstackstart-react): Trace server functions (#18500)

To enable tracing for server-side requests, you can now explicitly define a server entry point in your application and wrap your request handler with wrapFetchWithSentry.

// src/server.ts
import { wrapFetchWithSentry } from '@&#8203;sentry/tanstackstart-react';
import handler, { createServerEntry } from '@&#8203;tanstack/react-start/server-entry';

export default createServerEntry(
  wrapFetchWithSentry({
    fetch(request: Request) {
      return handler.fetch(request);
    },
  }),
);

feat(vue): Add TanStack Router integration (#18547)

The @sentry/vue package now includes support for TanStack Router. Use tanstackRouterBrowserTracingIntegration to automatically instrument pageload and navigation transactions with parameterized routes:

import { createApp } from 'vue';
import { createRouter } from '@&#8203;tanstack/vue-router';
import * as Sentry from '@&#8203;sentry/vue';
import { tanstackRouterBrowserTracingIntegration } from '@&#8203;sentry/vue/tanstackrouter';

const router = createRouter({
  // your router config
});

Sentry.init({
  app,
  dsn: '__PUBLIC_DSN__',
  integrations: [tanstackRouterBrowserTracingIntegration(router)],
  tracesSampleRate: 1.0,
});

Other Changes

feat(core): Capture initialize attributes on MCP servers (#18531)
feat(nextjs): Extract tracing logic from server component wrapper templates (#18408)
feat(nextjs): added webpack treeshaking flags as config (#18359)
fix(solid/tanstackrouter): Ensure web vitals are sent on pageload (#18542)

Internal Changes

chore(changelog): Add entry for scope attributes (#18555)
chore(changelog): Add entry for tanstack start wrapFetchWithSentry (#18558)
chore(deps): bump @trpc/server from 10.45.2 to 10.45.3 in /dev-packages/e2e-tests/test-applications/node-express-incorrect-instrumentation (#18530)
chore(deps): bump @trpc/server from 10.45.2 to 10.45.3 in /dev-packages/e2e-tests/test-applications/node-express-v5 (#18550)
chore(e2e): Pin to react-router 7.10.1 in spa e2e test (#18548)
chore(e2e): Remove check on http.response_content_length_uncompressed (#18536)
chore(github): Add "Closes" to PR template (#18538)
test(cloudflare-mcp): Unpin mcp sdk (#18528)
test(nextjs): Add e2e tests for server component spans in next 16 (#18544)

`v10.31.0`

Compare Source

Important Changes

feat(browser): Add support for GraphQL persisted operations (#18505)

The graphqlClientIntegration now supports GraphQL persisted operations (queries). When a persisted query is detected, the integration will capture the operation hash and version as span attributes:

graphql.persisted_query.hash.sha256 - The SHA-256 hash of the persisted query
graphql.persisted_query.version - The version of the persisted query protocol

Additionally, the graphql.document attribute format has changed to align with OpenTelemetry semantic conventions. It now contains only the GraphQL query string instead of the full JSON request payload.

Before:

"graphql.document": "{\"query\":\"query Test { user { id } }\"}"

After:

"graphql.document": "query Test { user { id } }"

Other Changes

feat(node): Support propagateTraceparent option (#18476)
feat(bun): Expose spotlight option in TypeScript (#18436)
feat(core): Add additional exports for captureException and captureMessage parameter types (#18521)
feat(core): Export captureException and captureMessage parameter types (#18509)
feat(core): Parse individual cookies from cookie header (#18325)
feat(node): Add instrument OpenAI export to node (#18461)
feat(nuxt): Bump @sentry/vite-plugin and @sentry/rollup-plugin to 4.6.1 (#18349)
feat(profiling): Add support for Node v24 in the prune script (#18447)
feat(tracing): strip inline media from messages (#18413)
feat(node): Add ESM support for postgres.js instrumentation (#17961)
fix(browser): Stringify span context in linked traces log statement (#18376)
fix(google-cloud-serverless): Move @types/express to optional peerDeps (#18452)
fix(node-core): passthrough node-cron context (#17835)
fix(tanstack-router): Check for fromLocation existence before reporting pageload (#18463)
fix(tracing): add system prompt, model to google genai (#18424)
fix(tracing): Set span operations for AI spans with model ID only (#18471)
ref(browser): Improve profiling debug statement (#18507)

Internal Changes

chore: Add external contributor to CHANGELOG.md (#18473)
chore: upgrade Playwright to ~1.56.0 for WSL2 compatibility (#18468)
chore(bugbot): Add testing conventions code review rules (#18433)
chore(deps): bump next from 14.2.25 to 14.2.35 in /dev-packages/e2e-tests/test-applications/create-next-app (#18494)
chore(deps): bump next from 14.2.32 to 14.2.35 in /dev-packages/e2e-tests/test-applications/nextjs-orpc (#18520)
chore(deps): bump next from 14.2.32 to 14.2.35 in /dev-packages/e2e-tests/test-applications/nextjs-pages-dir (#18496)
chore(deps): bump next from 15.5.7 to 15.5.9 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#18482)
chore(deps): bump next from 15.5.7 to 15.5.9 in /dev-packages/e2e-tests/test-applications/nextjs-15-intl (#18483)
chore(deps): bump next from 16.0.7 to 16.0.9 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#18480)
chore(deps): bump next from 16.0.7 to 16.0.9 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents (#18479)
chore(deps): bump next from 16.0.7 to 16.0.9 in /dev-packages/e2e-tests/test-applications/nextjs-16-tunnel (#18481)
chore(deps): bump next from 16.0.9 to 16.0.10 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#18514)
chore(deps): bump next from 16.0.9 to 16.0.10 in /dev-packages/e2e-tests/test-applications/nextjs-16-tunnel (#18487)
chore(tests): Added test variant flag (#18458)
test(cloudflare-mcp): Pin mcp sdk to 1.24.0 (#18524)

Work in this release was contributed by @sebws and @TBeeren. Thank you for your contributions!

Bundle size 📦

Path	Size
@sentry/browser	24.23 KB
@sentry/browser - with treeshaking flags	22.76 KB
@sentry/browser (incl. Tracing)	40.58 KB
@sentry/browser (incl. Tracing, Profiling)	45.08 KB
@sentry/browser (incl. Tracing, Replay)	78.1 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	68.07 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	82.67 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	94.62 KB
@sentry/browser (incl. Feedback)	40.54 KB
@sentry/browser (incl. sendFeedback)	28.8 KB
@sentry/browser (incl. FeedbackAsync)	33.68 KB
@sentry/react	25.9 KB
@sentry/react (incl. Tracing)	42.73 KB
@sentry/vue	28.58 KB
@sentry/vue (incl. Tracing)	42.35 KB
@sentry/svelte	24.24 KB
CDN Bundle	26.59 KB
CDN Bundle (incl. Tracing)	41.23 KB
CDN Bundle (incl. Tracing, Replay)	76.9 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	82.23 KB
CDN Bundle - uncompressed	78.15 KB
CDN Bundle (incl. Tracing) - uncompressed	122.44 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	235.75 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	248.21 KB
@sentry/nextjs (client)	44.9 KB
@sentry/sveltekit (client)	40.94 KB
@sentry/node-core	50.39 KB
@sentry/node	157.7 KB
@sentry/node - without tracing	90.85 KB
@sentry/aws-serverless	106 KB

`v10.30.0`

Compare Source

feat(nextjs): Deprecate Webpack top-level options (#18343)
feat(node): Capture scope when event loop blocked (#18040)
fix(aws-serverless): Remove hyphens from AWS-lambda origins (#18353)
fix(core): Parse method from Request object in fetch (#18453)
fix(react): Add transaction name guards for rapid lazy-route navigations (#18346)

Internal Changes

chore(ci): Fix double issue creation for unreferenced PRs (#18442)
chore(deps): bump next from 15.5.4 to 15.5.7 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#18411)
chore(deps): bump next from 15.5.4 to 15.5.7 in /dev-packages/e2e-tests/test-applications/nextjs-15-intl (#18400)
chore(deps): bump next from 16.0.0 to 16.0.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#18399)
chore(deps): bump next from 16.0.0 to 16.0.7 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents (#18427)
chore(deps): bump next from 16.0.0 to 16.0.7 in /dev-packages/e2e-tests/test-applications/nextjs-16-tunnel (#18439)
chore(publish): Fix publish order for @sentry/types (#18429)
ci(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#18362)

Bundle size 📦

Path	Size
@sentry/browser	24.23 KB
@sentry/browser - with treeshaking flags	22.76 KB
@sentry/browser (incl. Tracing)	40.57 KB
@sentry/browser (incl. Tracing, Profiling)	45.06 KB
@sentry/browser (incl. Tracing, Replay)	78.09 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	68.07 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	82.66 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	94.61 KB
@sentry/browser (incl. Feedback)	40.54 KB
@sentry/browser (incl. sendFeedback)	28.8 KB
@sentry/browser (incl. FeedbackAsync)	33.68 KB
@sentry/react	25.9 KB
@sentry/react (incl. Tracing)	42.73 KB
@sentry/vue	28.58 KB
@sentry/vue (incl. Tracing)	42.34 KB
@sentry/svelte	24.24 KB
CDN Bundle	26.6 KB
CDN Bundle (incl. Tracing)	41.24 KB
CDN Bundle (incl. Tracing, Replay)	76.91 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	82.23 KB
CDN Bundle - uncompressed	78.16 KB
CDN Bundle (incl. Tracing) - uncompressed	122.45 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	235.76 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	248.23 KB
@sentry/nextjs (client)	44.89 KB
@sentry/sveltekit (client)	40.94 KB
@sentry/node-core	50.06 KB
@sentry/node	155.85 KB
@sentry/node - without tracing	90.74 KB
@sentry/aws-serverless	105.67 KB

`v10.29.0`

Compare Source

Important Changes

feat(solid|solidstart): Bump accepted @solidjs/router range (#18395)

We expanded the supported version range for @solidjs/router to include 0.14.x and 0.15.x versions.

Other Changes

fix(logs): Add support for msg in pino integration (#18389)
fix(node): Include system message in anthropic-ai messages span (#18332)
fix(tracing): Add missing attributes in vercel-ai spans (#18333)

Internal Changes

chore(tanstackstart-react): clean up re-exported types (#18393)
ref(core): Avoid looking up openai integration options (#17695)
test(nuxt): Relax captured unhandled error assertion (#18397)
test(tanstackstart-react): Set up E2E test application (#18358)

Bundle size 📦

Path	Size
@sentry/browser	24.22 KB
@sentry/browser - with treeshaking flags	22.76 KB
@sentry/browser (incl. Tracing)	40.57 KB
@sentry/browser (incl. Tracing, Profiling)	45.05 KB
@sentry/browser (incl. Tracing, Replay)	78.08 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	68.05 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	82.65 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	94.61 KB
@sentry/browser (incl. Feedback)	40.51 KB
@sentry/browser (incl. sendFeedback)	28.8 KB
@sentry/browser (incl. FeedbackAsync)	33.66 KB
@sentry/react	25.9 KB
@sentry/react (incl. Tracing)	42.72 KB
@sentry/vue	28.56 KB
@sentry/vue (incl. Tracing)	42.32 KB
@sentry/svelte	24.24 KB
CDN Bundle	26.57 KB
CDN Bundle (incl. Tracing)	41.22 KB
CDN Bundle (incl. Tracing, Replay)	76.9 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	82.23 KB
CDN Bundle - uncompressed	78.09 KB
CDN Bundle (incl. Tracing) - uncompressed	122.4 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	235.71 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	248.17 KB
@sentry/nextjs (client)	44.88 KB
@sentry/sveltekit (client)	40.92 KB
@sentry/node-core	50.07 KB
@sentry/node	155.79 KB
@sentry/node - without tracing	90.68 KB
@sentry/aws-serverless	105.61 KB

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.50.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)
eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

Josh Goldberg ✨
Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

`v8.50.0`

Compare Source

🚀 Features

eslint-plugin: [no-useless-default-assignment] add rule (#11720)

❤️ Thank You

Josh Goldberg ✨
Ulrich Stark

You can read about our versioning strategy and releases on our website.

`v8.49.0`

Compare Source

🚀 Features

eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

Justin McBride
Kirk Waiblinger @kirkwaiblinger

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.50.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.50.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.49.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

`v9.39.2`

Compare Source

prettier/prettier (prettier)

`v3.7.4`

Compare Source

diff

LWC: Avoid quote around interpolations (#18383 by @kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

Configuration

📅 Schedule: Branch creation - "after 00:00 and before 04:00 on Wednesday" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2025-12-29T09:44:46Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

fix(deps): update weekly-non-major-updates

c1800a1

renovate bot added the dependencies Pull requests that update a dependency file label Dec 29, 2025

renovate bot requested review from Abhinegi2 and sleidig December 29, 2025 09:44

sleidig approved these changes Dec 29, 2025

View reviewed changes

sleidig merged commit 148ef87 into master Dec 29, 2025
9 checks passed

sleidig deleted the renovate/weekly-non-major-updates branch December 29, 2025 09:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update weekly-non-major-updates #195

fix(deps): update weekly-non-major-updates #195

Uh oh!

renovate bot commented Dec 29, 2025

Uh oh!

coderabbitai bot commented Dec 29, 2025

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

fix(deps): update weekly-non-major-updates #195

fix(deps): update weekly-non-major-updates #195

Uh oh!

Conversation

renovate bot commented Dec 29, 2025

Release Notes

v6.7.5: @​casl/ability: v6.7.5

Bug Fixes

v11.1.10 (2025-12-22)

Bug fixes

Enhancements

Dependencies

Committers: 11

What's Changed

Important Changes

Other Changes

Important Changes

Other Changes

Bundle size 📦

Bundle size 📦

Important Changes

Other Changes

Bundle size 📦

🩹 Fixes

❤️ Thank You

🚀 Features

❤️ Thank You

🚀 Features

🩹 Fixes

❤️ Thank You

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

Configuration

Uh oh!

coderabbitai bot commented Dec 29, 2025

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v6.7.5`: @casl/ability: v6.7.5

LWC: Avoid quote around interpolations (#18383 by @kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)

TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)