Skip to content

chore(deps): update all non-major dependencies #2190

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
dargmuesli merged 2 commits into from
Feb 2, 2026
Merged

chore(deps): update all non-major dependencies #2190

dargmuesli merged 2 commits into from
Feb 2, 2026

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 26, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@aws-sdk/client-sesv2 (source) 3.975.0 → 3.980.0 age confidence devDependencies minor
@aws-sdk/credential-providers (source) 3.975.0 → 3.980.0 age confidence devDependencies minor
@dargmuesli/nuxt-cookie-control 9.1.13 → 9.1.14 age confidence devDependencies patch
@iconify/tools 5.0.2 → 5.0.3 age confidence devDependencies patch
@nuxtjs/seo (source) 3.3.0 → 3.4.0 age confidence devDependencies minor
@sentry/nuxt (source) 10.36.0 → 10.38.0 age confidence devDependencies minor
@sentry/profiling-node (source) 10.36.0 → 10.38.0 age confidence devDependencies minor
@tiptap/core (source) 3.17.1 → 3.18.0 age confidence devDependencies minor
@tiptap/extension-text-align (source) 3.17.1 → 3.18.0 age confidence devDependencies minor
@tiptap/pm (source) 3.17.1 → 3.18.0 age confidence devDependencies minor
@tiptap/starter-kit (source) 3.17.1 → 3.18.0 age confidence devDependencies minor
@tiptap/vue-3 (source) 3.17.1 → 3.18.0 age confidence devDependencies minor
@types/nodemailer (source) 7.0.5 → 7.0.9 age confidence devDependencies patch
@vueuse/core (source) 14.1.0 → 14.2.0 age confidence devDependencies minor
dargmuesli/github-actions 4.0.4 → 4.0.5 age confidence action patch
nodemailer (source) 7.0.12 → 7.0.13 age confidence devDependencies patch
openai 6.16.0 → 6.17.0 age confidence devDependencies minor
pnpm (source) 10.28.1 → 10.28.2 age confidence packageManager patch
qrcode.vue (source) 3.6.0 → 3.7.1 age confidence devDependencies minor
reka-ui 2.7.0 → 2.8.0 age confidence devDependencies minor
stylelint (source) 17.0.0 → 17.1.0 age confidence devDependencies minor
typescript-eslint (source) 8.53.1 → 8.54.0 age confidence devDependencies minor

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-sesv2)

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sesv2

v3.978.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sesv2

aws/aws-sdk-js-v3 (@​aws-sdk/credential-providers)

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/credential-providers

v3.978.0

Compare Source

Note: Version bump only for package @​aws-sdk/credential-providers

dargmuesli/nuxt-cookie-control (@​dargmuesli/nuxt-cookie-control)

v9.1.14

Compare Source

Bug Fixes
iconify/tools (@​iconify/tools)

v5.0.3

Compare Source

harlan-zw/nuxt-seo (@​nuxtjs/seo)

v3.4.0

Compare Source

This release brings major updates to Robots and Sitemap with definePageMeta() integration, a new zeroRuntime sitemap mode, a redesigned sitemap.xsl, and improved i18n support across modules, plus stability fixes throughout.

Highlights:

✅ Upgrading

Our recommendation for upgrading is to run:

npx nuxt upgrade --dedupe

This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

📦 Module Updates

Nuxt Robots (v5.6.4 → v5.7.0)
  • ✨ Robots definePageMeta integration
  • ✨ i18n support for custom route paths in allow/disallow expansion
  • 🐛 Fix runtime resolution bug on @nuxtjs/robots/util
  • 🐛 Fix useBotDetection() empty when ran client-side only
  • 🐛 Fix broken route rules for Nuxt v3
  • 🐛 Fix type augmentation / definitions rework
  • 🐛 Fix Content-Usage/Content-Signal parsing with spaces after commas
  • 🐛 Fix broken useRobotsRule type, prevent _robots.txt in final bundle
Nuxt Sitemap (v7.4.9 → v7.6.0)
  • ✨ zeroRuntime mode for fully static sitemap generation
  • ✨ Build-time hook sitemap:prerender:done
  • ✨ Support sitemap on definePageMeta
  • ✨ Sitemap.xsl redesign with light/dark mode and validation warnings
  • ✨ Nuxt Content collection filters and onUrl function
  • ✨ DevTools UI refresh
  • ✨ parseSitemapIndex() utility
  • ⚡ Optimized XML generation, faster entry resolution, precomputed filter functions
  • 🐛 Fix memory leak on recursive sitemap requests
  • 🐛 Fix discoverImages missing body
  • 🐛 Fix chunked sitemaps with sitemapsPathPrefix /
  • 🐛 Fix i18n custom route paths, don't extract alternatives when autoI18n enabled
  • 🐛 Fix h3 v2 resolution, sitemaps with slash in name
  • 🐛 Fix type augments / overrides rework
Nuxt Site Config (v3.2.11 → v3.2.19)
  • 🐛 Fix env support for internal origin URL resolution
  • 🐛 Fix getNitroOrigin resolution rework
  • 🐛 Fix DevTools broken build and 500 error
  • 🐛 Fix respect devServer.host
  • 🐛 Fix i18n possible memory leak
  • 🐛 Fix handle undefined import.meta.env

    View changes on GitHub

getsentry/sentry-javascript (@​sentry/nuxt)

v10.38.0

Compare Source

Important Changes

  • feat(tanstackstart-react): Auto-instrument request middleware (#​18989)

    The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes
  • feat: Use v4.8.0 bundler plugins (#​18993)
  • feat(browser): Add logs.metrics bundle (#​19020)
  • feat(browser): Add replay.logs.metrics bundle (#​19021)
  • feat(browser): Add tracing.replay.logs.metrics bundle (#​19039)
  • feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#​19042)
  • feat(node): Add AI manual instrumentation exports to Node (#​19063)
  • feat(wasm): initialised sentryWasmImages for webworkers (#​18812)
  • fix(core): Classify custom AggregateErrors as exception groups (#​19053)
  • fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#​19010)
  • fix(react): Avoid String(key) to fix Symbol conversion error (#​18982)
  • fix(react): Prevent lazy route handlers from updating wrong navigation span (#​18898)
Internal Changes - feat(deps-dev): bump @​types/rsvp from 4.0.4 to 4.0.9 ([#​19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#​19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#​19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#​19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#​19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#​19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#​19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#​19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#​19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @​edge-runtime/types from 3.0.1 to 4.0.0 ([#​19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @​vercel/nft from 0.29.4 to 1.3.0 ([#​19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @​actions/artifact from 2.1.11 to 5.0.3 ([#​19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#​19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#​19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#​19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#​19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @​remix-run deps to 2.17.4 ([#​19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#​19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#​19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#​19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @​react-router/node, @​react-router/serve, @​react-router/dev to 7.13.0 ([#​19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#​19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#​18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#​19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#​18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @​remix-run/router to ^1.23.2 ([#​19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @​solidjs/start ([#​19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#​19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#​19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @​harshit078. Thank you for your contribution!

v10.37.0

Compare Source

Important Changes

  • feat(core): Introduces a new Sentry.setConversationId() API to track multi turn AI conversations across API calls. (#​18909)

    You can now set a conversation ID that will be automatically applied to spans within that scope. This allows you to link traces from the same conversation together.

    import * as Sentry from '@​sentry/node';

// Set conversation ID for all subsequent spans
Sentry.setConversationId('conv_abc123');

// All AI spans will now include the gen_ai.conversation.id attribute
await openai.chat.completions.create({...});

    This is particularly useful for tracking multiple AI API calls that are part of the same conversation, allowing you to analyze entire conversation flows in Sentry.
    The conversation ID is stored on the isolation scope and automatically applied to spans via the new conversationIdIntegration.

  • feat(tanstackstart-react): Auto-instrument global middleware in sentryTanstackStart Vite plugin (#​18844)

    The sentryTanstackStart Vite plugin now automatically instruments requestMiddleware and functionMiddleware arrays in createStart(). This captures performance data without requiring manual wrapping.

    Auto-instrumentation is enabled by default. To disable it:

    // vite.config.ts
sentryTanstackStart({
  authToken: process.env.SENTRY_AUTH_TOKEN,
  org: 'your-org',
  project: 'your-project',
  autoInstrumentMiddleware: false,
});
Other Changes
  • feat(core): simplify truncation logic to only keep the newest message (#​18906)
  • feat(core): Support new client discard reason invalid (#​18901)
  • feat(deps): Bump OpenTelemetry instrumentations (#​18934)
  • feat(nextjs): Update default ignore list for sourcemaps (#​18938)
  • feat(node): pass prisma instrumentation options through (#​18900)
  • feat(nuxt): Don't run source maps related code on Nuxt "prepare" (#​18936)
  • feat(replay): Update client report discard reason for invalid sessions (#​18796)
  • feat(winston): Add customLevelMap for winston transport (#​18922)
  • feat(react-router): Add support for React Router instrumentation API (#​18580)
  • fix(astro): Do not show warnings for valid options (#​18947)
  • fix(core): Report well known values in gen_ai.operation.name attribute (#​18925)
  • fix(node-core): ignore vercel AbortError by default on unhandled rejection (#​18973)
  • fix(nuxt): include sentry.config.server.ts in nuxt app types (#​18971)
  • fix(profiling): Add platform to envelope item header (#​18954)
  • fix(react): Defer React Router span finalization until lazy routes load (#​18881)
  • ref(core): rename gen_ai.input.messages.original_length to sentry.sdk_meta.gen_ai.input.messages.original_length (#​18970)
  • ref(core): rename gen_ai.request.messages to gen_ai.input.messages (#​18944)
  • ref(core): Set system message as separate attribute (#​18978)
  • deps: Bump version of sentry-bundler-plugins (#​18972)
Internal Changes
  • chore(e2e): Add e2e claude skill (#​18957)
  • chore(e2e): Add Makefile to make running specific e2e test apps easier (#​18953)
  • chore(e2e): Modify e2e skill to also account for untracked files (#​18959)
  • ref(tests): use constants in ai integration tests and add missing ones (#​18945)
  • test(nextjs): Added nextjs CF workers test app (#​18928)
  • test(prisma): Move to yarn prisma (#​18975)

Work in this release was contributed by @​sebws, @​harshit078, and @​fedetorre. Thank you for your contributions!

ueberdosis/tiptap (@​tiptap/core)

v3.18.0

Compare Source

Patch Changes
ueberdosis/tiptap (@​tiptap/extension-text-align)

v3.18.0

Compare Source

Patch Changes
ueberdosis/tiptap (@​tiptap/pm)

v3.18.0

Compare Source

ueberdosis/tiptap (@​tiptap/starter-kit)

v3.18.0

Compare Source

Patch Changes
ueberdosis/tiptap (@​tiptap/vue-3)

v3.18.0

Compare Source

Patch Changes
vueuse/vueuse (@​vueuse/core)

v14.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
dargmuesli/github-actions (dargmuesli/github-actions)

v4.0.5

Compare Source

Bug Fixes
nodemailer/nodemailer (nodemailer)

v7.0.13

Compare Source

Bug Fixes
  • downgrade transient connection error logs to warn level (4c041db)
openai/openai-node (openai)

v6.17.0

Compare Source

Full Changelog: v6.16.0...v6.17.0

Features
Bug Fixes
  • api: mark assistants as deprecated (3ae2a14)
Chores
  • ci: upgrade actions/github-script (4ea73d3)
  • internal: update actions/checkout version (f163b77)
  • internal: upgrade babel, qs, js-yaml (2e2f3c6)
pnpm/pnpm (pnpm)

v10.28.2: pnpm 10.28.2

Compare Source

Patch Changes

  • Security fix: prevent path traversal in directories.bin field.

  • When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

    This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

    Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.

  • Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #​9950.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite
scopewu/qrcode.vue (qrcode.vue)

v3.7.1

Compare Source

Bugfix
  • Fix logo image border radius scale in QRCode.

v3.7.0

Compare Source

Feature
  • Suppord border radius for QRCode logo image.
  • optimize performance for QRCode.
Bugfix
  • Fix state update issue when value prop changed.
unovue/reka-ui (reka-ui)

v2.8.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
stylelint/stylelint (stylelint)

v17.1.0

Compare Source

It fixes 5 bugs and adds the display-notation rule. Before we turn it on in our standard config, we'd like to hear the community's thoughts on which options to use.

typescript-eslint/typescript-eslint (typescript-eslint)

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Jan 26, 2026

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

  • Branch has one or more failed status checks

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 19 times, most recently from e6b0f51 to 85cfd35 Compare February 1, 2026 15:05
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 85cfd35 to ead9dd9 Compare February 2, 2026 00:39
@dargmuesli dargmuesli force-pushed the renovate/all-minor-patch branch from 00f6d93 to f112c20 Compare February 2, 2026 05:17
@renovate
Copy link
Contributor Author

renovate bot commented Feb 2, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@dargmuesli dargmuesli force-pushed the renovate/all-minor-patch branch 3 times, most recently from 09e4448 to 312f0ce Compare February 2, 2026 22:24
@dargmuesli dargmuesli force-pushed the renovate/all-minor-patch branch from 312f0ce to e54d538 Compare February 2, 2026 23:13
@dargmuesli dargmuesli merged commit 2fccb3e into main Feb 2, 2026
14 checks passed
@dargmuesli dargmuesli deleted the renovate/all-minor-patch branch February 2, 2026 23:20
@maevsi-bot
Copy link

maevsi-bot commented Feb 7, 2026

🎉 This PR is included in version 13.3.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@maevsi-bot @dargmuesli