Repository navigation
chore(deps): bump the everything-else group across 1 directory with 15 updates - #6559
dependabot[bot] wants to merge 1 commit into
Conversation
…5 updates Bumps the everything-else group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | @rdi-ui/pipeline | `0.1.35` | `0.1.49` | | [@sentry/electron](https://github.com/getsentry/sentry-electron) | `7.18.0` | `7.20.2` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.73.0` | `10.76.2` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.17` | | [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.90.0` | | [socket.io-client](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` | | [@sentry/vite-plugin](https://github.com/getsentry/sentry-javascript) | `5.4.0` | `5.4.1` | | [@sentry/webpack-plugin](https://github.com/getsentry/sentry-javascript) | `5.4.0` | `5.4.1` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.25` | `4.17.27` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.4` | `9.2.5` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.50.0` | `3.51.0` | | [csv-stringify](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify) | `6.8.3` | `6.9.0` | | [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | Updates `@rdi-ui/pipeline` from 0.1.35 to 0.1.49 Updates `@sentry/electron` from 7.18.0 to 7.20.2 - [Release notes](https://github.com/getsentry/sentry-electron/releases) - [Changelog](https://github.com/getsentry/sentry-electron/blob/7.20.2/CHANGELOG.md) - [Commits](getsentry/sentry-electron@7.18.0...7.20.2) Updates `@sentry/react` from 10.73.0 to 10.76.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.76.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.73.0...10.76.2) Updates `dompurify` from 3.4.14 to 3.4.17 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.14...3.4.17) Updates `jszip` from 3.10.1 to 3.10.2 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.10.1...v3.10.2) Updates `react-hook-form` from 7.87.0 to 7.90.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.87.0...v7.90.0) Updates `socket.io-client` from 4.8.3 to 4.8.4 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-client@4.8.3...socket.io-client@4.8.4) Updates `@sentry/vite-plugin` from 5.4.0 to 5.4.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@5.4.0...5.4.1) Updates `@sentry/webpack-plugin` from 5.4.0 to 5.4.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@5.4.0...5.4.1) Updates `@types/lodash` from 4.17.25 to 4.17.27 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `concurrently` from 9.2.4 to 9.2.5 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.2.4...v9.2.5) Updates `core-js` from 3.50.0 to 3.51.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.51.0/packages/core-js) Updates `csv-stringify` from 6.8.3 to 6.9.0 - [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-stringify/CHANGELOG.md) - [Commits](https://github.com/adaltas/node-csv/commits/csv-stringify@6.9.0/packages/csv-stringify) Updates `moment` from 2.30.1 to 2.31.0 - [Release notes](https://github.com/moment/moment/releases) - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.30.1...2.31.0) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) --- updated-dependencies: - dependency-name: "@rdi-ui/pipeline" dependency-version: 0.1.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: "@sentry/electron" dependency-version: 7.20.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: "@sentry/react" dependency-version: 10.76.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: dompurify dependency-version: 3.4.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: jszip dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: react-hook-form dependency-version: 7.90.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: socket.io-client dependency-version: 4.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: "@sentry/vite-plugin" dependency-version: 5.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: "@sentry/webpack-plugin" dependency-version: 5.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: "@types/lodash" dependency-version: 4.17.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: concurrently dependency-version: 9.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: core-js dependency-version: 3.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: csv-stringify dependency-version: 6.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: moment dependency-version: 2.31.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: everything-else ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 25d7c0ba4b
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@sentry/electron": "^7.20.2", | ||
| "@sentry/react": "^10.76.2", |
There was a problem hiding this comment.
When Sentry is enabled, these upgrades create an unsupported mixture of SDK internals: @sentry/electron@7.20.2 requires @sentry/core@10.75.0, while @sentry/react@10.76.2 requires @sentry/core@10.76.2, but the existing root override still forces every consumer to 10.73.0. The Electron renderer passes React's init into the Electron SDK, so an API difference between these tightly pinned packages can make initialization or event capture fail and silently disable production reporting through the existing catch path; align the Electron/React versions and update or remove the core override together.
Useful? React with 👍 / 👎.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 25d7c0b. Configure here.
| "@sentry/electron": "^7.18.0", | ||
| "@sentry/react": "^10.73.0", | ||
| "@sentry/electron": "^7.20.2", | ||
| "@sentry/react": "^10.76.2", |
There was a problem hiding this comment.
Stale Sentry core version override
Medium Severity
@sentry/react is now 10.76.2 and @sentry/electron pins 10.75.0 internals, but the npm overrides entry still forces a single @sentry/core@10.73.0. The lockfile resolves only that older core, so the new SDKs run against mismatched internals. Sentry packages pin exact core versions, so this can break init, isolation scopes, or event forwarding in both the Electron renderer and main process.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit 25d7c0b. Configure here.
| "integrity": "sha512-gLyJlPHPZYdAk1JENA9LeHejZe1Ti77/pTeFm/nMXmQH/HFZlcS/O2XJB+L8fkbrNSqhdtlvjBVjxwUYanNH5Q==", | ||
| "version": "1.10.0", | ||
| "resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.10.0.tgz", | ||
| "integrity": "sha512-lMkyes8iHrG+mk6WH7X70MdCLI2RS0FwNBY1PyQ8UemaijE2m5mv5A0Niy3HtbYTFrgkUEQjFMXmSAk2hQDuPQ==", |
There was a problem hiding this comment.
Incompatible OpenTelemetry API version
Medium Severity
The @sentry/electron bump pulls @sentry/node@10.75.0, whose @opentelemetry/api range ^1.9.1 now resolves to 1.10.0. That API only works with OpenTelemetry SDK v3, while Sentry v10 still uses SDK v2 packages that declare a peer of @opentelemetry/api <1.10.0. Sentry documents this mix as unsupported, so Electron main-process init or tracing can fail or degrade.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit 25d7c0b. Configure here.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the everything-else group with 15 updates in the / directory:
0.1.350.1.497.18.07.20.210.73.010.76.23.4.143.4.173.10.13.10.27.87.07.90.04.8.34.8.45.4.05.4.15.4.05.4.14.17.254.17.279.2.49.2.53.50.03.51.06.8.36.9.02.30.12.31.04.23.134.23.15Updates
@rdi-ui/pipelinefrom 0.1.35 to 0.1.49Updates
@sentry/electronfrom 7.18.0 to 7.20.2Release notes
Sourced from @sentry/electron's releases.
Changelog
Sourced from @sentry/electron's changelog.
Commits
64029a3release: 7.20.2faf4ce9fix(v7): Only add main process context lines to renderer frames in the app di...35cb0befix(v7): Allow removal ofmessagelisteners on utility processes (#1474)e3d93b9fix(v7): Stop re-running event processors on every main process scope change ...778502aMerge commit 'd1b000e78fd86476f49e6fec4207385a60196b09' into v7d1b000erelease: 7.20.1877b0abchore: Change the publish tag (#1455)d3c6736fix: Handle v1 standalone span envelopes from renderers (v7) (#1451)9ff12c9fix: Keep framework SDK default integrations in renderer init (v7) (#1454)1a500a8Merge remote-tracking branch 'remotes/origin/release/7.20.0'Updates
@sentry/reactfrom 10.73.0 to 10.76.2Release notes
Sourced from @sentry/react's releases.
... (truncated)
Changelog
Sourced from @sentry/react's changelog.
... (truncated)
Commits
042e228fix typo in changelogc04d41frelease: 10.76.23810881meta(changelog): Update changelog for 10.76.2 (#25181)73cb3d0fix(v10/core): Exclude attachments from internal exception events (#25167)65482d6fix(v10/sveltekit): Upload source maps with SvelteKit 3 (#25172)485ebb3feat(v10/deps): Bump bundler plugins to 5.4.1 (#25147)a9c5c42fix(v10/effect): Detect HTTP spans named after the request method (#25169)602f245fix(v10/ai): Normalize token usage and preserve cache breakdowns (#25126)527414etest(v10/nextjs): Pin nextjs-16-cf-workers latest variant to Next.js 16.3 (#2...910d09dMerge commit 'c2bf38e907c80719bd94bde2ef894bcd0ae018ae' into v10Updates
dompurifyfrom 3.4.14 to 3.4.17Release notes
Sourced from dompurify's releases.
Commits
a77a3e7release: 3.4.17 (#1672)b9b9d80release: 3.4.16 (#1636)1d7460crelease: 3.4.15 (#1609)Updates
jszipfrom 3.10.1 to 3.10.2Changelog
Sourced from jszip's changelog.
Commits
020fa33Release preparation for 3.10.2 (#974)d38fda5Fix cross-realm binary type detection in getTypeOf (#578)e682f9aFix grunt build rebundling existing dist via browser field (#971)5adef36Add missing types for JSZip.defaults (#927)41a1342Fix blob support in Node.js 18 and up (#955)643714aMove all continuous integration to GitHub Actions (#942)418c11fUpgrade Playwright to the latest version (#940)2ceb998Create FUNDING.ymlMaintainer changes
This version was pushed to npm by jkoops, a new releaser for jszip since your current version.
Updates
react-hook-formfrom 7.87.0 to 7.90.0Release notes
Sourced from react-hook-form's releases.
... (truncated)
Changelog
Sourced from react-hook-form's changelog.
... (truncated)
Commits
8ac7cc07.90.08f7d2de🧪 tests cleanup and fix warnings (#13835)e76876b🐞 fix(useForm): mark fields named after Object.prototype members as touched o...08ddcd6🐞 fix(cloneObject): keep the length of sparse arrays (#13834)b8e0a6d🐞 fix: safely extract dirty values for hasOwnProperty fields (#13832)36e5329🐞 fix(useForm): reset options that are removed from the props on re-render (#...c7cb33a🐞 fix(useFieldArray): ignore duplicated indexes and keep the indexes passed t...91856c2🧪 test(swap): cover self-index no-op behavior (#13829)000faaf🐞 fix(useFieldArray): skip unregister while a parent array reindexes (#13828)7838f08🐞 fix #13802: keep input edited before the form is ready (#13827)Updates
socket.io-clientfrom 4.8.3 to 4.8.4Release notes
Sourced from socket.io-client's releases.
Commits
11a6f56chore(release): socket.io-client@4.8.400e4e73chore(release): engine.io-client@6.6.7e387ab1chore: use@rollup/plugin-terserinstead of rollup-plugin-terser9738333chore(release): engine.io@6.6.11fc9dd90docs(eio): rework READMEda008a5fix(eio): refresh ping timeout on incoming packets3df3fedfix(eio-client): restore default transport resolutionaaf2af3test: upgrade WebdriverIO to v9b5da079refactor(sio): simplify packet handling switch45873cadocs(protocol): clarify namespace comma restriction for built-in parser (#5545)Updates
@sentry/vite-pluginfrom 5.4.0 to 5.4.1Changelog
Sourced from @sentry/vite-plugin's changelog.
... (truncated)
Commits
39af04brelease: 5.4.1f13d4c6fix: fetch headers if array (#2096)62436fffix: Docs publish script9116bc7Merge release/5.4.0 into masterUpdates
@sentry/webpack-pluginfrom 5.4.0 to 5.4.1Changelog
Sourced from @sentry/webpack-plugin's changelog.
... (truncated)
Commits
39af04brelease: 5.4.1f13d4c6fix: fetch headers if array (#2096)62436fffix: Docs publish script9116bc7Merge release/5.4.0 into masterUpdates
@types/lodashfrom 4.17.25 to 4.17.27Commits
Updates
concurrentlyfrom 9.2.4 to 9.2.5Release notes
Sourced from concurrently's releases.
Commits
4fb52e29.2.5dac54d0deps: update shell-quote to 1.12.0 (#622)Updates
core-jsfrom 3.50.0 to 3.51.0Release notes
Sourced from core-js's releases.