Skip to content

fix(deps): update frontend non-major dependencies#1545

Open
renovate[bot] wants to merge 1 commit intostagingfrom
renovate/frontend-minor-patch
Open

fix(deps): update frontend non-major dependencies#1545
renovate[bot] wants to merge 1 commit intostagingfrom
renovate/frontend-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 30, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@nuxt/scripts (source) 0.13.2 → 0.13.4 age confidence
@sentry/bun (source) 10.47.0 → 10.49.0 age confidence
@sentry/node (source) 10.47.0 → 10.49.0 age confidence
@sentry/nuxt (source) 10.47.0 → 10.49.0 age confidence
@sentry/profiling-node (source) 10.47.0 → 10.49.0 age confidence
@types/bun (source) 1.3.11 → 1.3.13 age confidence
@unocss/nuxt (source) 66.6.7 → 66.6.8 age confidence
@vue/language-server (source) 3.2.6 → 3.2.7 age confidence
axios (source) 1.14.0 → 1.15.2 age confidence
browserstack-local 1.5.12 → 1.5.13 age confidence
codeceptjs (source) 3.7.7 → 3.7.8 age confidence
dompurify 3.3.3 → 3.4.1 age confidence
eslint (source) 10.2.0 → 10.2.1 age confidence
eslint-plugin-oxlint 1.58.0 → 1.61.0 age confidence
filesize (source) 11.0.15 → 11.0.16 age confidence
import-in-the-middle 3.0.0 → 3.0.1 age confidence
jsdom 29.0.1 → 29.0.2 age confidence
marked-linkify-it 3.1.14 → 3.1.15 age confidence
oxlint (source) 1.58.0 → 1.61.0 age confidence
pnpm (source) 10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be → 10.33.1 age confidence
pnpm (source) 10.33.0 → 10.33.1 age confidence
prettier (source) 3.8.1 → 3.8.3 age confidence
qs 6.15.0 → 6.15.1 age confidence
swagger-typescript-api 13.6.7 → 13.6.10 age confidence
unocss (source) 66.6.7 → 66.6.8 age confidence
vue (source) 3.5.32 → 3.5.33 age confidence
vue-i18n (source) 11.3.0 → 11.3.2 age confidence
vue-router (source) 5.0.4 → 5.0.6 age confidence
vue-tsc (source) 3.2.6 → 3.2.7 age confidence

Release Notes

nuxt/scripts (@​nuxt/scripts)

v0.13.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.13.3

Compare Source

Full Changelog: nuxt/scripts@v0.13.3...v0.13.3

getsentry/sentry-javascript (@​sentry/bun)

v10.49.0

Compare Source

Important Changes

  • feat(browser): Add View Hierarchy integration (#​14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@​sentry/browser';

Sentry.init({
  dsn: '__DSN__',
  integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#​19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#​19991, #​20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#​20167, #​20181, #​20182, #​20183, #​20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#​20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes
  • feat(core): Export a reusable function to add tracing headers (#​20076)
  • feat(core): Expose rewriteSources top level option (#​20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#​20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#​20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#​20108)
  • fix(core, node): Support loading Express options lazily (#​20211)
  • fix(core): Set conversation_id only on gen_ai spans (#​20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#​20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#​20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#​20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#​20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#​20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#​20328)
  • fix(replay): Use live click attributes in breadcrumbs (#​20262)
Internal Changes
  • chore: Add PR review reminder workflow (#​20175)
  • chore: Fix lint warnings (#​20250)
  • chore(bugbot): Add rules to flag test-flake-provoking patterns (#​20192)
  • chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#​20249)
  • chore(ci): Bump dorny/paths-filter from v3.0.1 to v4.0.1 (#​20251)
  • chore(ci): Remove codecov steps from jobs that produce no coverage/JUnit data (#​20244)
  • chore(ci): Remove craft changelog preview (#​20271)
  • chore(ci): Remove node-overhead GitHub Action (#​20246)
  • chore(ci): Replace pr-labels-action with native GitHub expressions (#​20252)
  • chore(ci): Skip flaky issue creation for optional tests (#​20288)
  • chore(deps-dev): Bump @​sveltejs/kit from 2.53.3 to 2.57.1 (#​20216)
  • chore(deps-dev): Bump vite from 7.2.0 to 7.3.2 in /dev-packages/e2e-tests/test-applications/tanstackstart-react (#​20107)
  • chore(deps): Bump axios from 1.13.5 to 1.15.0 (#​20180)
  • chore(deps): Bump axios from 1.13.5 to 1.15.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#​20179)
  • chore(deps): Bump hono from 4.12.7 to 4.12.12 (#​20118)
  • chore(deps): Bump hono from 4.12.7 to 4.12.12 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#​20119)
  • chore(deps): Bump next from 16.1.7 to 16.2.3 in nextjs-16-cf-workers (#​20289)
  • chore(size-limit): Bump failing size limit scenario (#​20186)
  • ci: Add automatic flaky test detector (#​18684)
  • ci: Extract test names for flaky test issues (#​20298)
  • ci: Remove Docker container for Verdaccio package publishing (#​20329)
  • fix(ci): Prevent command injection in ci-metadata workflow (#​19899)
  • fix(e2e-tests): Remove flaky navigation breadcrumb assertions from parameterized-routes tests (#​20202)
  • fix(e2e): Add op check to waitForTransaction in React Router e2e tests (#​20193)
  • fix(node-integration-tests): Fix flaky kafkajs test race condition (#​20189)
  • ref(core): Add registry in Vercel ai integration (#​20098)
  • ref(core): Automatically disable truncation when span streaming is enabled in Anthropic AI integration (#​20228)
  • ref(core): Automatically disable truncation when span streaming is enabled in Google GenAI integration (#​20229)
  • ref(core): Automatically disable truncation when span streaming is enabled in LangChain integration (#​20230)
  • ref(core): Automatically disable truncation when span streaming is enabled in LangGraph integration (#​20231)
  • ref(core): Automatically disable truncation when span streaming is enabled in OpenAI integration (#​20227)
  • ref(core): Automatically disable truncation when span streaming is enabled in Vercel AI integration (#​20232)
  • ref(core): Merge embeddings operations constants (#​20095)
  • ref(core): Remove unused constants from vercel-ai-attributes.ts (#​20096)
  • ref(nextjs): Refactor findInjectionIndexAfterDirectives for better readability (#​20310)
  • ref(opentelemetry): Replace @opentelemetry/resources with inline getSentryResource() (#​20327)
  • test: Fix flaky ANR test by increasing blocking duration (#​20239)
  • test(bun): Add bun integration test folder (#​20286)
  • test(cloudflare): Skip flaky durableobject-spans test (#​20282)
  • test(openai): Use multi-message scenario in no-truncation test (#​20194)
  • test(react): Remove duplicated test mock (#​20200)
  • tests(ai): Fix streaming+truncation integration tests across AI integrations (#​20326)

Bundle size 📦

Path Size
@​sentry/browser 25.18 KB
@​sentry/browser - with treeshaking flags 23.71 KB
@​sentry/browser (incl. Tracing) 42.59 KB
@​sentry/browser (incl. Tracing + Span Streaming) 44.26 KB
@​sentry/browser (incl. Tracing, Profiling) 47.37 KB
@​sentry/browser (incl. Tracing, Replay) 80.8 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 70.55 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 85.38 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 97.34 KB
@​sentry/browser (incl. Feedback) 41.59 KB
@​sentry/browser (incl. sendFeedback) 29.74 KB
@​sentry/browser (incl. FeedbackAsync) 34.62 KB
@​sentry/browser (incl. Metrics) 26.44 KB
@​sentry/browser (incl. Logs) 26.57 KB
@​sentry/browser (incl. Metrics & Logs) 27.24 KB
@​sentry/react 26.89 KB
@​sentry/react (incl. Tracing) 44.81 KB
@​sentry/vue 29.89 KB
@​sentry/vue (incl. Tracing) 44.38 KB
@​sentry/svelte 25.2 KB
CDN Bundle 27.79 KB
CDN Bundle (incl. Tracing) 43.64 KB
CDN Bundle (incl. Logs, Metrics) 29.13 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 44.7 KB
CDN Bundle (incl. Replay, Logs, Metrics) 67.12 KB
CDN Bundle (incl. Tracing, Replay) 79.74 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 80.79 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 85.13 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 86.17 KB
CDN Bundle - uncompressed 81.17 KB
CDN Bundle (incl. Tracing) - uncompressed 130.51 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 85.22 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 133.84 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 205.7 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 244.99 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 248.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 257.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 260.91 KB
@​sentry/nextjs (client) 47.28 KB
@​sentry/sveltekit (client) 43.02 KB
@​sentry/node-core 56.58 KB
@​sentry/node 170.68 KB
@​sentry/node - without tracing 95.57 KB
@​sentry/aws-serverless 112.42 KB

v10.48.0

Compare Source

unocss/unocss (@​unocss/nuxt)

v66.6.8

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
vuejs/language-tools (@​vue/language-server)

v3.2.7

Compare Source

component-meta
  • fix: preserve non-ASCII characters in prop default values (#​6012) - Thanks to @​ef81sp!
workspace
axios/axios (axios)

v1.15.2

Compare Source

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

🔒 Security Fixes

  • Prototype Pollution Hardening (HTTP Adapter): Hardened the Node HTTP adapter and resolveConfig/mergeConfig/validator paths to read only own properties and use null-prototype config objects, preventing polluted auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser from influencing requests. (#​10779)
  • SSRF via socketPath: Rejects non-string socketPath values and adds an opt-in allowedSocketPaths config option to restrict permitted Unix domain socket paths, returning AxiosError ERR_BAD_OPTION_VALUE on mismatch. (#​10777)
  • Supply-chain Hardening: Added .npmrc with ignore-scripts=true, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded SECURITY.md/THREATMODEL.md with provenance verification (npm audit signatures), 60-day resolution policy, and maintainer incident-response runbook. (#​10776)

🚀 New Features

  • allowedSocketPaths Config Option: New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (#​10777)

🐛 Bug Fixes

  • Keep-alive Socket Memory Leak: Installs a single per-socket error listener tracking the active request via kAxiosSocketListener/kAxiosCurrentReq, eliminating per-request listener accumulation, MaxListenersExceededWarning, and linear heap growth under concurrent or long-running keep-alive workloads (fixes #​10780). (#​10788)

🔧 Maintenance & Chores

  • Changelog: Updated CHANGELOG.md with v1.15.1 release notes. (#​10781)

Full Changelog

v1.15.1

Compare Source

v1.15.0

Compare Source

Bug Fixes
Features
  • fomdata: added support for spec-compliant FormData & Blob types; (#​5316) (6ac574e)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.6 (2023-01-28)

Bug Fixes
  • headers: added missed Authorization accessor; (#​5502) (342c0ba)
  • types: fixed CommonRequestHeadersList & CommonResponseHeadersList types to be private in commonJS; (#​5503) (5a3d0a3)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.5 (2023-01-26)

Bug Fixes
  • types: fixed AxiosHeaders to handle spread syntax by making all methods non-enumerable; (#​5499) (580f1e8)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.4 (2023-01-22)

Bug Fixes
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.3 (2023-01-10)

Bug Fixes
  • types: fixed AxiosRequestConfig header interface by refactoring it to RawAxiosRequestConfig; (#​5420) (0811963)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.2.2] - 2022-12-29

Fixed
Chores
  • chore(ci): set conventional-changelog header config #​5406
  • chore(ci): fix automatic contributors resolving #​5403
  • chore(ci): improved logging for the contributors list generator #​5398
  • chore(ci): fix release action #​5397
  • chore(ci): fix version bump script by adding bump argument for target version #​5393
  • chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 #​5342
  • chore(ci): GitHub Actions Release script #​5384
  • chore(ci): release scripts #​5364
Contributors to this release

[1.2.1] - 2022-12-05

Changed
  • feat(exports): export mergeConfig #​5151
Fixed
  • fix(CancelledError): include config #​4922
  • fix(general): removing multiple/trailing/leading whitespace #​5022
  • fix(headers): decompression for responses without Content-Length header #​5306
  • fix(webWorker): exception to sending form data in web worker #​5139
Refactors
  • refactor(types): AxiosProgressEvent.event type to any #​5308
  • refactor(types): add missing types for static AxiosError.from method #​4956
Chores
  • chore(docs): remove README link to non-existent upgrade guide #​5307
  • chore(docs): typo in issue template name #​5159
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.2.0] - 2022-11-10

Changed
  • changed: refactored module exports #​5162
  • change: re-added support for loading Axios with require('axios').default #​5225
Fixed
  • fix: improve AxiosHeaders class #​5224
  • fix: TypeScript type definitions for commonjs #​5196
  • fix: type definition of use method on AxiosInterceptorManager to match the the README #​5071
  • fix: __dirname is not defined in the sandbox #​5269
  • fix: AxiosError.toJSON method to avoid circular references #​5247
  • fix: Z_BUF_ERROR when content-encoding is set but the response body is empty #​5250
Refactors
  • refactor: allowing adapters to be loaded by name #​5277
Chores
  • chore: force CI restart #​5243
  • chore: update ECOSYSTEM.md #​5077
  • chore: update get/index.html #​5116
  • chore: update Sandbox UI/UX #​5205
  • chore:(actions): remove git credentials after checkout #​5235
  • chore(actions): bump actions/dependency-review-action from 2 to 3 #​5266
  • chore(packages): bump loader-utils from 1.4.1 to 1.4.2 #​5295
  • chore(packages): bump engine.io from 6.2.0 to 6.2.1 #​5294
  • chore(packages): bump socket.io-parser from 4.0.4 to 4.0.5 #​5241
  • chore(packages): bump loader-utils from 1.4.0 to 1.4.1 #​5245
  • chore(docs): update Resources links in README #​5119
  • chore(docs): update the link for JSON url #​5265
  • chore(docs): fix broken links #​5218
  • chore(docs): update and rename UPGRADE_GUIDE.md to MIGRATION_GUIDE.md #​5170
  • chore(docs): typo fix line #​856 and #​920 #​5194
  • chore(docs): typo fix #​800 #​5193
  • chore(docs): fix typos #​5184
  • chore(docs): fix punctuation in README.md #​5197
  • chore(docs): update readme in the Handling Errors section - issue reference #​5260 #​5261
  • chore: remove \b from filename #​5207
  • chore(docs): update CHANGELOG.md #​5137
  • chore: add sideEffects false to package.json #​5025
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.3] - 2022-10-15

Added
  • Added custom params serializer support #​5113
Fixed
  • Fixed top-level export to keep them in-line with static properties #​5109
  • Stopped including null values to query string. #​5108
  • Restored proxy config backwards compatibility with 0.x #​5097
  • Added back AxiosHeaders in AxiosHeaderValue #​5103
  • Pin CDN install instructions to a specific version #​5060
  • Handling of array values fixed for AxiosHeaders #​5085
Chores
  • docs: match badge style, add link to them #​5046
  • chore: fixing comments typo #​5054
  • chore: update issue template #​5061
  • chore: added progress capturing section to the docs; #​5084
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.2] - 2022-10-07

Fixed
  • Fixed broken exports for UMD builds.
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.1] - 2022-10-07

Fixed
  • Fixed broken exports for common js. This fix breaks a prior fix, I will fix both issues ASAP but the commonJS use is more impactful.
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.0] - 2022-10-06

Fixed
  • Fixed missing exports in type definition index.d.ts #​5003
  • Fixed query params composing #​5018
  • Fixed GenericAbortSignal interface by making it more generic #​5021
  • Fixed adding "clear" to AxiosInterceptorManager #​5010
  • Fixed commonjs & umd exports #​5030
  • Fixed inability to access response headers when using axios 1.x with Jest #​5036
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.0.0] - 2022-10-04

Added
  • Added stack trace to AxiosError #​4624
  • Add AxiosError to AxiosStatic #​4654
  • Replaced Rollup as our build runner #​4596
  • Added generic TS types for the exposed toFormData helper #​4668
  • Added listen callback function #​4096
  • Added instructions for installing using PNPM #​4207
  • Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill #​4229
  • Added axios-url-template in ECOSYSTEM.md #​4238
  • Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an axios instance #​4248
  • Added react hook plugin #​4319
  • Adding HTTP status code for transformResponse #​4580
  • Added blob to the list of protocols supported by the browser #​4678
  • Resolving proxy from env on redirect #​4436
  • Added enhanced toFormData implementation with additional options 4704
  • Adding Canceler parameters config and request #​4711
  • Added automatic payload serialization to application/x-www-form-urlencoded #​4714
  • Added the ability for webpack users to overwrite built-ins #​4715
  • Added string[] to AxiosRequestHeaders type #​4322
  • Added the ability for the url-encoded-form serializer to respect the formSerializer config #​4721
  • Added isCan

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch 8 times, most recently from c9e7a7a to 734bede Compare April 4, 2026 21:43
@renovate renovate Bot changed the title fix(deps): update frontend non-major dependencies chore(deps): update pnpm to v10.33.0 Apr 5, 2026
@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch 2 times, most recently from fe2e284 to 4de3308 Compare April 6, 2026 09:49
@renovate renovate Bot changed the title chore(deps): update pnpm to v10.33.0 fix(deps): update frontend non-major dependencies Apr 6, 2026
@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch 14 times, most recently from 74af71c to cdbcd22 Compare April 13, 2026 22:29
@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch 4 times, most recently from c9be72b to 28beb53 Compare April 16, 2026 12:50
@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch 8 times, most recently from ae5aed2 to a80305b Compare April 22, 2026 13:55
@renovate renovate Bot force-pushed the renovate/frontend-minor-patch branch from a80305b to 53f6db3 Compare April 22, 2026 20:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants