chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@ai-sdk/anthropic (source)	3.0.75 → 3.0.82					dependencies	patch
@ai-sdk/openai (source)	3.0.62 → 3.0.69					dependencies	patch
@antfu/eslint-config	8.2.0 → 8.3.0					devDependencies	minor
@sentry/react (source)	10.52.0 → 10.57.0					devDependencies	minor
@tailwindcss/vite (source)	4.2.4 → 4.3.0					devDependencies	minor
@tanstack/react-query (source)	5.100.9 → 5.101.0					devDependencies	minor
@tanstack/react-query-devtools (source)	5.100.9 → 5.101.0					devDependencies	minor
@types/node (source)	25.6.0 → 25.9.2					devDependencies	minor
@types/react (source)	19.2.14 → 19.2.17					devDependencies	patch
@vitejs/plugin-react (source)	6.0.1 → 6.0.2					devDependencies	patch
ai (source)	6.0.175 → 6.0.199					dependencies	patch
dayjs (source)	1.11.20 → 1.11.21					devDependencies	patch
dexie (source)	4.4.2 → 4.4.3					devDependencies	patch
electron	41.5.0 → 41.7.2					devDependencies	minor
electron-builder (source)	26.8.1 → 26.15.2					devDependencies	minor
electron-log	5.4.3 → 5.4.4					devDependencies	patch
electron-updater (source)	6.8.3 → 6.8.9					devDependencies	patch
eslint (source)	10.3.0 → 10.4.1					devDependencies	minor
framer-motion	12.38.0 → 12.40.0					devDependencies	minor
lucide-react (source)	1.14.0 → 1.17.0					devDependencies	minor
opencc-js	1.3.0 → 1.3.1					devDependencies	patch
pnpm (source)	10.11.0 → 10.34.1					packageManager	minor
pnpm/action-setup	v4.1.0 → v4.4.0					action	minor
prettier (source)	3.8.3 → 3.8.4					devDependencies	patch
prettier-plugin-tailwindcss	^0.7.2 → ^0.8.0					devDependencies	minor
radix-ui (source)	1.4.3 → 1.5.0					dependencies	minor
react (source)	19.2.6 → 19.2.7					devDependencies	patch
react-dom (source)	19.2.6 → 19.2.7					devDependencies	patch
react-router (source)	7.15.0 → 7.17.0					devDependencies	minor
react-scan (source)	0.5.6 → 0.5.7					devDependencies	patch
softprops/action-gh-release	v2.2.1 → v2.6.2					action	minor
tailwind-merge	3.5.0 → 3.6.0					devDependencies	minor
tailwindcss (source)	4.2.4 → 4.3.0					devDependencies	minor
vite (source)	8.0.11 → 8.0.16					devDependencies	patch

---

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v3.0.82

Compare Source

Patch Changes

• 2a91a17: feat(provider/anthropic): add support for claude-fable-5 and the fallbacks API parameter

v3.0.81

Compare Source

Patch Changes

• 4084fcd: feat(provider/anthropic): add support for claude-opus-4-8

v3.0.80

Compare Source

Patch Changes

• 263d3e6: fix(provider/anthropic): fix remaining errors with Anthropic code_execution tool dynamic calls from latest web_fetch or web_search

v3.0.79

Compare Source

Patch Changes

• d61a788: Handle errors from anthropic websearch tool

v3.0.78

Compare Source

Patch Changes

• 6e28d25: fix(anthropic): propagate toModelOutput providerOption to anthropic tool results

v3.0.77

Patch Changes

• d53314d: feat(anthropic): add the new advisor tool

v3.0.76

Patch Changes

• Updated dependencies [f591416]
  • @​ai-sdk/provider-utils@​4.0.27

antfu/eslint-config (@​antfu/eslint-config)

v8.3.0

Compare Source

   🚀 Features

• Make perfectionist configurable inside antfu()  -  by @​oliver139 in #​848 (ae1d6)
• stylistic: Allow easy setting brace style  -  by @​oliver139 in #​846 (bd784)
• svelte: Use recommended rules  -  by @​Jungzl in #​842 (6c839)

   🐞 Bug Fixes

• markdown: Scope user rule overrides away from md files  -  by @​antfu and Claude Opus 4.7 (1M context) in #​844 (8d25a)

    View changes on GitHub

getsentry/sentry-javascript (@​sentry/react)

v10.57.0

Compare Source

Important Changes

• feat(angular): Add support for Angular 22 (#​21330)

  @sentry/angular now officially supports Angular 22.

• ref(core): Deprecate sendDefaultPii in favor of dataCollection (#​21277)

  sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data.
  sendDefaultPii: true still works and maps to enabling all dataCollection categories.
  dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default.
  Data you set explicitly (like via Sentry.setUser()) is always sent regardless.
  When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

  Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

  Sentry.init({
    dataCollection: {
      userInfo: false,
      genAI: { inputs: false, outputs: false },
      httpBodies: [],
      httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    },
  });

Other Changes

• feat: Use dataCollection.frameContextLines for ContextLines integration (#​21323)
• feat(cloudflare): Auto instrument D1 based on env (#​21276)
• feat(core): Change default of dataCollection.userInfo to true (#​21348)
• feat(core): Default dataCollection.httpBodies to all valid body types (#​21352)
• feat(hono): Filter noisy transactions (favicon etc) (#​21365)
• fix(cloudflare): Don't track negatively sampled spans (#​21367)
• fix(core): Use safeDateNow calls for new Date() reads (#​21351)
• fix(nextjs): Shim pinoIntegration on edge runtime (#​21347)
• fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#​21364)
• fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#​21339)
• fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#​21326)
• fix(react): Remove unused react.componentStack event context (#​21183)
• fix(replays): Record sentry._internal.replay_is_buffering for spans (#​21297)

Internal Changes

• chore: Bump volta node version from 20.19.2 to 20.19.5 (#​21359)
• chore: Remove git:* allowed permissions (#​21328)
• chore(deps-dev): Bump eslint-plugin-regexp from 1.15.0 to 3.1.0 (#​21104)
• chore(deps-dev): Bump react-router from 7.13.0 to 7.15.0 (#​21337)
• chore(size-limit): weekly auto-bump (#​21344)
• docs(remix): Add notice about capturing http bodies for form data keys (#​21296)
• feat(deps): Bump @​types/aws-lambda from 8.10.150 to 8.10.161 (#​21105)
• feat(deps): Bump axios from 1.15.2 to 1.16.0 (#​21251)
• feat(deps): Bump hono from 4.12.18 to 4.12.21 (#​21341)
• ref(browser): Split web vitals integration (#​21210)
• ref(node): Streamline lru-memoizer instrumentation (#​21350)
• ref(node): Streamline sql-common (#​21360)
• test(e2e): Migrate sendDefaultPii to dataCollection option (#​21288)
• test(nextjs): Remove assertion on conditional span (#​21329)
• test(node): Move node integration tests to data collection (#​21283)

Work in this release was contributed by @​zhongrenfei1-hub. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	26.57 KB
@​sentry/browser - with treeshaking flags	25.05 KB
@​sentry/browser (incl. Tracing)	44.44 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.62 KB
@​sentry/browser (incl. Tracing, Profiling)	49.11 KB
@​sentry/browser (incl. Tracing, Replay)	82.73 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	72.6 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.31 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	99.71 KB
@​sentry/browser (incl. Feedback)	43.33 KB
@​sentry/browser (incl. sendFeedback)	31.28 KB
@​sentry/browser (incl. FeedbackAsync)	36.25 KB
@​sentry/browser (incl. Metrics)	27.62 KB
@​sentry/browser (incl. Logs)	27.86 KB
@​sentry/browser (incl. Metrics & Logs)	28.54 KB
@​sentry/react	28.34 KB
@​sentry/react (incl. Tracing)	46.66 KB
@​sentry/vue	31.47 KB
@​sentry/vue (incl. Tracing)	46.29 KB
@​sentry/svelte	26.6 KB
CDN Bundle	28.89 KB
CDN Bundle (incl. Tracing)	46.83 KB
CDN Bundle (incl. Logs, Metrics)	30.36 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.05 KB
CDN Bundle (incl. Replay, Logs, Metrics)	68.72 KB
CDN Bundle (incl. Tracing, Replay)	83.34 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.49 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.02 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.18 KB
CDN Bundle - uncompressed	85.72 KB
CDN Bundle (incl. Tracing) - uncompressed	141.58 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	90.1 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	145.25 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	211.99 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	257.67 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	261.32 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	274.69 KB
@​sentry/nextjs (client)	49.08 KB
@​sentry/sveltekit (client)	44.85 KB
@​sentry/core/server	74.18 KB
@​sentry/core/browser	61.62 KB
@​sentry/node-core	60.28 KB
@​sentry/node	127.37 KB
@​sentry/node - without tracing	72.37 KB
@​sentry/aws-serverless	84.26 KB
@​sentry/cloudflare (withSentry) - minified	169.62 KB
@​sentry/cloudflare (withSentry)	423.68 KB

v10.56.0

Compare Source

Important Changes

• feat(deno): Redis diagnostics channel based integration for Deno (#​21087)

  Adds Redis integration support for Deno, covering both redis and ioredis clients.

Other Changes

• feat(cloudflare): Only capture workflow step error on final retry attempt (#​21025)
• feat(hono): Emit warning if @sentry/node was imported instead of @sentry/hono/node (#​21240)
• feat(node): Use ioredis tracing channels (#​21187)
• fix(browser): Correctly parse sampleRate when consistentTraceSampling is enabled (#​21281)
• fix(cloudflare): Fix instrumentDurableObjectWithSentry breaking Cloudflare Agents (#​21101)
• fix(cloudflare): Wait for span links to be set (#​21167)
• fix(core): Use WeakRef for Span-Scope circular references (#​21242)
• fix(node): Vendor InstrumentationNodeModuleFile to fix Bun --bytecode crash (#​21262)
• fix(profiling-node): Ensure node version support warning includes latest 26 (#​21229)

Internal Changes

• chore: Ignore scheduled_tasks.lock (#​21252)
• chore: Promote lint warnings to errors (#​21213)
• chore(docs): Document how to support a new node version (#​21228)
• chore(size-limit): Weekly auto-bump (#​21243)
• chore(skills): Add linear-project-status skill (#​21214)
• chore(skills): Add linear-project-update skill (#​21233)
• chore(skills): Improve triage-issue skill (#​21257)
• chore(skills): Update linear-project-status skill with more details & context (#​21234)
• feat(deps): Bump axios from 1.15.0 to 1.16.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#​21263)
• feat(server-utils): Initial scaffolding (#​21200)
• ref(cloudflare): Move D1 instrumentation (#​21266)
• ref(node): Refactor usage of hrTime utilities from @opentelemetry/core (#​21191)
• ref(node): Stop mutating OTel RPC metadata to set http.route (#​21193)
• ref(opentelemetry): Vendor minimal TraceState implementation (#​21192)
• test(browser): Add unit test for http client header collection behavior (#​21273)
• test(browser): Move browser integration tests to dataCollection (#​21282)
• test(cloudflare): Remove vitest in CF e2e tests (#​21259)

Bundle size 📦

Path	Size
@​sentry/browser	26.57 KB
@​sentry/browser - with treeshaking flags	25.05 KB
@​sentry/browser (incl. Tracing)	44.19 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.37 KB
@​sentry/browser (incl. Tracing, Profiling)	49.06 KB
@​sentry/browser (incl. Tracing, Replay)	82.86 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	72.67 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	99.78 KB
@​sentry/browser (incl. Feedback)	43.32 KB
@​sentry/browser (incl. sendFeedback)	31.27 KB
@​sentry/browser (incl. FeedbackAsync)	36.24 KB
@​sentry/browser (incl. Metrics)	27.61 KB
@​sentry/browser (incl. Logs)	27.85 KB
@​sentry/browser (incl. Metrics & Logs)	28.53 KB
@​sentry/react	28.35 KB
@​sentry/react (incl. Tracing)	46.41 KB
@​sentry/vue	31.46 KB
@​sentry/vue (incl. Tracing)	46.06 KB
@​sentry/svelte	26.59 KB
CDN Bundle	28.88 KB
CDN Bundle (incl. Tracing)	46.7 KB
CDN Bundle (incl. Logs, Metrics)	30.35 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	47.91 KB
CDN Bundle (incl. Replay, Logs, Metrics)	68.69 KB
CDN Bundle (incl. Tracing, Replay)	83.19 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	88.92 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.04 KB
CDN Bundle - uncompressed	85.64 KB
CDN Bundle (incl. Tracing) - uncompressed	140.75 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	90.03 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	144.42 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	211.83 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	256.74 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	260.4 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	270.12 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	273.77 KB
@​sentry/nextjs (client)	48.88 KB
@​sentry/sveltekit (client)	44.64 KB
@​sentry/core/server	74.16 KB
@​sentry/core/browser	61.61 KB
@​sentry/node-core	60.25 KB
@​sentry/node	127.35 KB
@​sentry/node - without tracing	72.33 KB
@​sentry/aws-serverless	84.24 KB
@​sentry/cloudflare (withSentry) - minified	167.82 KB
@​sentry/cloudflare (withSentry)	419.43 KB

v10.55.0

Compare Source

Important Changes

• feat(hono): Promote @sentry/hono to stable and deprecate honoIntegration (#​21208)

  The @sentry/hono SDK is now stable. See the Sentry Hono SDK docs to get started.

• docs(tanstackstart-react): Promote SDK status to beta (#​21175)

  This release promotes the @sentry/tanstackstart-react SDK to beta. For details on how to use it, check out the
  Sentry TanStack Start SDK docs. Please reach out on
  GitHub if you have any feedback or concerns.

• feat(hono): Add shouldHandleError option to sentry() middleware (#​21205)

  The sentry() middleware now accepts a shouldHandleError callback to control which errors are captured and sent to Sentry. By default, 3xx/4xx HTTP errors are ignored and 5xx errors and plain Error objects are captured. Return true from the callback to capture an error, false to suppress it.

  app.use(
    sentry(app, {
      dsn: '__DSN__',
      shouldHandleError(error) {
        const status = (error as { status?: number })?.status;
        // Capture 401/403 in addition to the default 5xx errors
        return status === 401 || status === 403 || typeof status !== 'number' || status >= 500;
      },
    }),
  );

• test(tanstackstart-react): Move initialization to client entry point (#​21161)

  Change the recommended setup for the SDK to do Sentry.init() in the client entry file to capture telemetry that is emitted ahead of page hydration.

• feat(tanstackstart-react): Add distributed tracing (#​21144)

  Server and client traces are now automatically connected, allowing you to see the full request lifecycle from server-side rendering through client-side hydration in a single trace.

• feat(tanstackstart-react): Add server-side route parametrization (#​21147)

  Server transaction names are now parametrized automatically (e.g., GET /users/123 becomes GET /users/$userId), improving transaction grouping in Sentry.

• feat(tanstackstart-react): Show readable server function names in traces (#​21190)

  Server function spans now show human-readable names (e.g., GET /_serverFn/greet instead of GET /_serverFn/a10e70b3...). The tanstackstart.function.hash.sha256 span attribute has been renamed to tanstackstart.function.id.

Other Changes

• feat(core): Migrate request data to dataCollection (#​21071)
• feat(hono): Add warning in Bun for double init (#​21195)
• feat(hono): Instrument main-app inline middleware spans (#​20999)
• feat(metrics): Migrate metrics to use dataCollection instead of sendDefaultPii (#​21078)
• feat(tanstackstart-react): Enable component tracking (#​21149)
• feat(tanstackstart-react): Filter noisy dev transactions (#​21145)
• fix(cloudflare): Use original waitUntil to not create a deadlock (#​21197)
• fix(elysia): Widen accepted Elysia app type to support Elysia options (#​21164)
• fix(tanstackstart-react): Add server-side replayIntegration no-op stub (#​21148)

Internal Changes

• chore(changelog): clarify array attributes impact on beforeSend* callbacks (#​21186)
• chore(ci): Update bugbot instructions (#​21168)
• chore(sentry-cli): Upgrade to 2.58.6 (#​21165)
• chore(size-limit): weekly auto-bump (#​21123)
• feat(deps-dev): Bump @​sveltejs/kit from 2.52.2 to 2.60.1 in /dev-packages/e2e-tests/test-applications/sveltekit-cloudflare-pages (#​21162)
• fix(e2e): Fix astro-6 e2e test build by relaxing astro version range (#​21211)
• meta(agents): Update AI commit attribution guidance (#​21166)
• ref(browser): Extract browser-specific normalize code out of core (#​21172)
• ref(node): Stop custom-handling normalization of Domain/DomainEmitter (#​21182)
• ref(node): Stop using registerSpanErrorInstrumentation() on server (#​21169)
• test(nitro-3): Update e2e tests for h3 route handler tracing (#​21152)
• test(nuxt): Fix flaky test and add note about hydration timing to skill (#​21054)

v10.54.0

Compare Source

Important Changes

• feat(core): Support array attributes for spans, logs, and metrics (#​20427)

  Arrays of primitive values (string, number, boolean) are now accepted as attribute values. Arrays containing non-primitive elements will be dropped and won't show up in Sentry. Array attributes on logs and metrics were previously stringified and will now be sent as actual arrays instead. If you have custom rules that process attribute values in any beforeSend* callbacks (e.g., data scrubbing), you may need to update them to correctly handle array values.

  For instance, here's how you can update a beforeSendLog callback to handle arrays:

  beforeSendLog: log => {
    const attributes = log.attributes;
    Object.keys(attributes).forEach(key => {
      const value = attributes[key];
      if (typeof value === 'string') {
        attributes[key] = scrubData(value);
      }
      if (Array.isArray(value)) {
        attributes[key] = value.map(v => (typeof v === 'string' ? scrubData(v) : v));
      }
    });
    return log;
  };

• **feat(browser): Add fetchStreamPerformanceIntegration for streamed response tracking ([#​20778](https://redirect.github.com/getsentry/sentry

✂ Note

PR body was truncated to here.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 4 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
.                                        |  WARN  deprecated fluent-ffmpeg@2.1.3
Progress: resolved 44, reused 0, downloaded 0, added 0
Progress: resolved 69, reused 0, downloaded 0, added 0
Progress: resolved 73, reused 0, downloaded 0, added 0
Progress: resolved 77, reused 0, downloaded 0, added 0
Progress: resolved 104, reused 0, downloaded 0, added 0
Progress: resolved 165, reused 0, downloaded 0, added 0
Progress: resolved 174, reused 0, downloaded 0, added 0
Progress: resolved 186, reused 0, downloaded 0, added 0
Progress: resolved 205, reused 0, downloaded 0, added 0
Progress: resolved 249, reused 0, downloaded 0, added 0
Progress: resolved 277, reused 0, downloaded 0, added 0
Progress: resolved 289, reused 0, downloaded 0, added 0
Progress: resolved 304, reused 0, downloaded 0, added 0
Progress: resolved 322, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/marchen-dev/marchen-player/packages/electron-ipc:
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "semver@6.3.1" (possible package takeover)

This error happened while installing the dependencies of electron@41.5.0
 at @electron/get@2.0.3

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.