Skip to content

⬆️ (deps): Bump the minor-and-patch group with 11 updates - #2403

Merged
lissy93 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-fbb397328b
Oct 23, 2026
Merged

⬆️ (deps): Bump the minor-and-patch group with 11 updates#2403
lissy93 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-fbb397328b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 11 updates:

Package From To
@codemirror/autocomplete 6.20.3 6.20.4
@codemirror/view 6.43.14 6.43.15
@sentry/vue 11.7.0 11.8.0
jose 6.2.12 6.2.13
js-yaml 5.4.3 5.5.0
vue-i18n 11.4.14 11.4.16
@vitest/ui 5.0.4 5.0.5
eslint 10.12.0 10.13.0
happy-dom 21.0.1 21.0.3
postcss 8.5.30 8.5.31
sass 1.105.1 1.105.2

Updates @codemirror/autocomplete from 6.20.3 to 6.20.4

Commits

Updates @codemirror/view from 6.43.14 to 6.43.15

Commits

Updates @sentry/vue from 11.7.0 to 11.8.0

Release notes

Sourced from @​sentry/vue's releases.

11.8.0

Important Changes

  • feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

    The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

    • Node.js 20.19.0 or higher is required.
    • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
    • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
    • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

  • feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

    OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

  • feat(core): Support SuppressedError in LinkedErrors integration (#25246)
  • fix(astro): Delete generated source maps for static output (#25310)
  • fix(astro): Upload source maps of Astro 7's prerender build (#25309)
  • fix(browser): Apply urlQueryParams to the Referer header (#25324)
  • fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
  • fix(hono): Expose runtime-specific SDK options (#25290)
  • fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)
  • fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)
  • fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)
  • fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)
  • fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
  • fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)
  • fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)
  • chore: Add external contributor to CHANGELOG.md (#25375)
  • ci: Install the pnpm version that Volta pins (#25287)
  • license: Add cli FSL notice to package licenses (#25314)
  • ref(core): use shared MCP attribute conventions (#25059)
  • ref(tanstackstart-react): Reuse shared component annotation options (#25313)
  • test(browser): Keep whitespace text out of the handlers-lcp page (#25280)
  • test(bun): Restore @​sentry/core spies after the Bun.serve tests (#25276)
  • test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
  • test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)
  • test(e2e): Add node-openai-send-to-sentry test app (#24824)
  • test(e2e): Add nuxt-5-sourcemaps test (#25268)
  • test(e2e): Inherit root Volta config in all e2e test apps (#25369)
  • test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)
  • test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)
  • test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#25279)

... (truncated)

Changelog

Sourced from @​sentry/vue's changelog.

11.8.0

Important Changes

  • feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

    The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

    • Node.js 20.19.0 or higher is required.
    • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
    • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
    • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

  • feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

    OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

  • feat(core): Support SuppressedError in LinkedErrors integration (#25246)
  • fix(astro): Delete generated source maps for static output (#25310)
  • fix(astro): Upload source maps of Astro 7's prerender build (#25309)
  • fix(browser): Apply urlQueryParams to the Referer header (#25324)
  • fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
  • fix(hono): Expose runtime-specific SDK options (#25290)
  • fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)
  • fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)
  • fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)
  • fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)
  • fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
  • fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)
  • fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)
  • chore: Add external contributor to CHANGELOG.md (#25375)
  • ci: Install the pnpm version that Volta pins (#25287)
  • license: Add cli FSL notice to package licenses (#25314)
  • ref(core): use shared MCP attribute conventions (#25059)
  • ref(tanstackstart-react): Reuse shared component annotation options (#25313)
  • test(browser): Keep whitespace text out of the handlers-lcp page (#25280)
  • test(bun): Restore @​sentry/core spies after the Bun.serve tests (#25276)
  • test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
  • test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)
  • test(e2e): Add node-openai-send-to-sentry test app (#24824)
  • test(e2e): Add nuxt-5-sourcemaps test (#25268)
  • test(e2e): Inherit root Volta config in all e2e test apps (#25369)
  • test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)
  • test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

... (truncated)

Commits
  • c6492ef release: 11.8.0
  • e091f7f meta(changelog): Update changelog for 11.8.0 (#25388)
  • 30ec754 meta(changelog): Update changelog for 11.8.0
  • a309cf8 test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
  • 71f1ef9 test(e2e): Inherit root Volta config in all e2e test apps (#25369)
  • e54e577 chore: Add external contributor to CHANGELOG.md (#25375)
  • 0ed4606 fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
  • 9516aeb fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
  • 7471347 feat(core): Support SuppressedError in LinkedErrors integration (#25246)
  • f4ae6c5 fix(browser): Apply urlQueryParams to the Referer header (#25324)
  • Additional commits viewable in compare view

Updates jose from 6.2.12 to 6.2.13

Release notes

Sourced from jose's releases.

v6.2.13

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Changelog

Sourced from jose's changelog.

6.2.13 (2026-10-20)

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Commits
  • 316b7f2 chore(release): 6.2.13
  • 8106395 chore: bump packages
  • 724ba24 refactor: preserve underlying error causes
  • b112a5e chore: bump packages
  • 2a3a525 chore(deps-dev): bump workerd in /tap/workerd
  • 8f540d8 chore(deps): bump the actions group with 3 updates
  • 8d6c02b chore(deps-dev): bump electron from 44.0.0 to 44.4.5 in /tap/electron
  • 55c959f ci: use gh run rerun for retries
  • 5b00c64 ci: address zizmor findings and bump shared workflows
  • 1761d7f chore: bump packages
  • Additional commits viewable in compare view

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • See full diff in compare view

Updates vue-i18n from 11.4.14 to 11.4.16

Release notes

Sourced from vue-i18n's releases.

v11.4.16

What's Changed

🐛 Bug Fixes

Full Changelog: intlify/vue-i18n@v11.4.15...v11.4.16

v11.4.15

What's Changed

🐛 Bug Fixes

📝️ Documentations

Full Changelog: intlify/vue-i18n@v11.4.14...v11.4.15

Changelog

Sourced from vue-i18n's changelog.

v11.4.16 (2026-10-18T07:43:18.954Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

Full Changelog: intlify/vue-i18n@v11.4.15...v11.4.16

v11.4.15 (2026-10-17T15:12:11.060Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

📝️ Documentations

Full Changelog: intlify/vue-i18n@v11.4.14...v11.4.15

Commits
  • ffe5249 release: v11.4.16
  • 04defcb release: v11.4.15
  • 3d8774f fix: let Node.js ESM load the Node.js builds, so that SSR works in production...
  • See full diff in compare view

Updates @vitest/ui from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/ui's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates happy-dom from 21.0.1 to 21.0.3

Release notes

Sourced from happy-dom's releases.

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

Commits
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • See full diff in compare view

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Changelog

Sourced from postcss's changelog.

8.5.31

Commits

Updates sass from 1.105.1 to 1.105.2

Release notes

Sourced from sass's releases.

Dart Sass 1.105.2

To install Sass 1.105.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Node.js Embedded Host

  • Fix a deadlock when the async compiler fails to start.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.105.2

Node.js Embedded Host

  • Fix a deadlock when the async compiler fails to start.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
⬆️ (deps): Bump the minor-and-patch group with 11 updates
58c1df3 
Bumps the minor-and-patch group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.3` | `6.20.4` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.14` | `6.43.15` |
| [@sentry/vue](https://github.com/getsentry/sentry-javascript) | `11.7.0` | `11.8.0` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.13` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.3` | `5.5.0` |
| [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n) | `11.4.14` | `11.4.16` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.4` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `21.0.1` | `21.0.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` |
| [sass](https://github.com/sass/dart-sass) | `1.105.1` | `1.105.2` |


Updates `@codemirror/autocomplete` from 6.20.3 to 6.20.4
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/view` from 6.43.14 to 6.43.15
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@sentry/vue` from 11.7.0 to 11.8.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.7.0...11.8.0)

Updates `jose` from 6.2.12 to 6.2.13
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.13)

Updates `js-yaml` from 5.4.3 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.3...5.5.0)

Updates `vue-i18n` from 11.4.14 to 11.4.16
- [Release notes](https://github.com/intlify/vue-i18n/releases)
- [Changelog](https://github.com/intlify/vue-i18n/blob/v11.4.16/CHANGELOG.md)
- [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.16/packages/vue-i18n)

Updates `@vitest/ui` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/ui)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `happy-dom` from 21.0.1 to 21.0.3
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v21.0.1...v21.0.3)

Updates `postcss` from 8.5.30 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.30...8.5.31)

Updates `sass` from 1.105.1 to 1.105.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.105.1...1.105.2)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@sentry/vue"
  dependency-version: 11.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vue-i18n
  dependency-version: 11.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: happy-dom
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.105.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from lissy93 as a code owner October 23, 2026 09:15
@dependabot dependabot Bot added the 📦 Dependencies PRs which bump dependency versions label Oct 23, 2026
@netlify

netlify Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for dashy-dev ready!

Name Link
🔨 Latest commit 58c1df3
🔍 Latest deploy log https://app.netlify.com/projects/dashy-dev/deploys/6adb25a5cfb2500dc4872196
😎 Deploy Preview https://deploy-preview-2403--dashy-dev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@lissy93
lissy93 merged commit 7eaea1c into master Oct 23, 2026
18 checks passed
@lissy93
lissy93 deleted the dependabot/npm_and_yarn/minor-and-patch-fbb397328b branch October 23, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lissy93 lissy93 Awaiting requested review from lissy93 lissy93 is a code owner

Assignees

@lissy93 lissy93

Labels

📦 Dependencies PRs which bump dependency versions

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lissy93