Skip to content

Update all non-major dependencies#898

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#898
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jun 1, 2026

This PR contains the following updates:

Package Change Age Confidence
@inlang/paraglide-js (source) ^2.18.1^2.18.2 age confidence
@sentry/deno (source) ^10.55.0^10.56.0 age confidence
@sentry/svelte (source) ^10.55.0^10.56.0 age confidence
@sveltejs/kit (source) ^2.61.1^2.63.0 age confidence
@types/node (source) ^24.12.4^24.13.0 age confidence
axios (source) ^1.16.1^1.17.0 age confidence
svelte (source) ^5.56.0^5.56.1 age confidence
tsx (source) ^4.22.3^4.22.4 age confidence
vite (source) ^8.0.14^8.0.16 age confidence
vitest (source) ^4.1.7^4.1.8 age confidence

Release Notes

opral/paraglide-js (@​inlang/paraglide-js)

v2.18.2

Patch Changes
  • 4bea31a: Prevent paraglide-js compile --watch from cleaning the output directory on the initial compile.

  • 4dfa099: Fix emitted TypeScript declarations for message keys that require quoted export aliases, such as dotted nested keys.

    emitTsDeclarations now preserves quoted aliases from the generated JavaScript so .d.ts output remains valid for keys like greeting.hello. The optional TypeScript peer dependency now requires TypeScript 5.6 or newer, which supports arbitrary quoted module export names.

getsentry/sentry-javascript (@​sentry/deno)

v10.56.0

Compare Source

Important Changes
  • feat(deno): Redis diagnostics channel based integration for Deno (#​21087)

    Adds Redis integration support for Deno, covering both redis and ioredis clients.

Other Changes
  • feat(cloudflare): Only capture workflow step error on final retry attempt (#​21025)
  • feat(hono): Emit warning if @sentry/node was imported instead of @sentry/hono/node (#​21240)
  • feat(node): Use ioredis tracing channels (#​21187)
  • fix(browser): Correctly parse sampleRate when consistentTraceSampling is enabled (#​21281)
  • fix(cloudflare): Fix instrumentDurableObjectWithSentry breaking Cloudflare Agents (#​21101)
  • fix(cloudflare): Wait for span links to be set (#​21167)
  • fix(core): Use WeakRef for Span-Scope circular references (#​21242)
  • fix(node): Vendor InstrumentationNodeModuleFile to fix Bun --bytecode crash (#​21262)
  • fix(profiling-node): Ensure node version support warning includes latest 26 (#​21229)
Internal Changes
  • chore: Ignore scheduled_tasks.lock (#​21252)
  • chore: Promote lint warnings to errors (#​21213)
  • chore(docs): Document how to support a new node version (#​21228)
  • chore(size-limit): Weekly auto-bump (#​21243)
  • chore(skills): Add linear-project-status skill (#​21214)
  • chore(skills): Add linear-project-update skill (#​21233)
  • chore(skills): Improve triage-issue skill (#​21257)
  • chore(skills): Update linear-project-status skill with more details & context (#​21234)
  • feat(deps): Bump axios from 1.15.0 to 1.16.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#​21263)
  • feat(server-utils): Initial scaffolding (#​21200)
  • ref(cloudflare): Move D1 instrumentation (#​21266)
  • ref(node): Refactor usage of hrTime utilities from @opentelemetry/core (#​21191)
  • ref(node): Stop mutating OTel RPC metadata to set http.route (#​21193)
  • ref(opentelemetry): Vendor minimal TraceState implementation (#​21192)
  • test(browser): Add unit test for http client header collection behavior (#​21273)
  • test(browser): Move browser integration tests to dataCollection (#​21282)
  • test(cloudflare): Remove vitest in CF e2e tests (#​21259)

Bundle size 📦

Path Size
@​sentry/browser 26.57 KB
@​sentry/browser - with treeshaking flags 25.05 KB
@​sentry/browser (incl. Tracing) 44.19 KB
@​sentry/browser (incl. Tracing + Span Streaming) 46.37 KB
@​sentry/browser (incl. Tracing, Profiling) 49.06 KB
@​sentry/browser (incl. Tracing, Replay) 82.86 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 72.67 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 87.45 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 99.78 KB
@​sentry/browser (incl. Feedback) 43.32 KB
@​sentry/browser (incl. sendFeedback) 31.27 KB
@​sentry/browser (incl. FeedbackAsync) 36.24 KB
@​sentry/browser (incl. Metrics) 27.61 KB
@​sentry/browser (incl. Logs) 27.85 KB
@​sentry/browser (incl. Metrics & Logs) 28.53 KB
@​sentry/react 28.35 KB
@​sentry/react (incl. Tracing) 46.41 KB
@​sentry/vue 31.46 KB
@​sentry/vue (incl. Tracing) 46.06 KB
@​sentry/svelte 26.59 KB
CDN Bundle 28.88 KB
CDN Bundle (incl. Tracing) 46.7 KB
CDN Bundle (incl. Logs, Metrics) 30.35 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 47.91 KB
CDN Bundle (incl. Replay, Logs, Metrics) 68.69 KB
CDN Bundle (incl. Tracing, Replay) 83.19 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 84.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 88.92 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 90.04 KB
CDN Bundle - uncompressed 85.64 KB
CDN Bundle (incl. Tracing) - uncompressed 140.75 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 90.03 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 144.42 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 211.83 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 256.74 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 260.4 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 270.12 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 273.77 KB
@​sentry/nextjs (client) 48.88 KB
@​sentry/sveltekit (client) 44.64 KB
@​sentry/core/server 74.16 KB
@​sentry/core/browser 61.61 KB
@​sentry/node-core 60.25 KB
@​sentry/node 127.35 KB
@​sentry/node - without tracing 72.33 KB
@​sentry/aws-serverless 84.24 KB
@​sentry/cloudflare (withSentry) - minified 167.82 KB
@​sentry/cloudflare (withSentry) 419.43 KB
sveltejs/kit (@​sveltejs/kit)

v2.63.0

Compare Source

Minor Changes
Patch Changes
  • fix: remove check for svelte.config.js before running sync (#​15946)

  • fix: generate a placeholder tsconfig.json to squelch sync-time warnings (#​15948)

  • fix: allow use of $app/env/public in service workers (#​15950)

v2.62.0

Compare Source

Minor Changes
  • feat: support passing Svelte(Kit) config via Vite plugin (#​15944)
Patch Changes
  • fix: preserve multiple Set-Cookie headers on 304 responses (#​15902)

  • fix: preload for anchor elements that were just previously preloaded (#​15915)

  • fix: catch load function streaming errors on the client (#​15929)

  • fix: avoid generating the _app/env.js module if public dynamic environment variables are not used by the app (#​15940)

axios/axios (axios)

v1.17.0

Compare Source

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#​10901, #​10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#​10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#​6792, #​10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#​10929, #​10896)
  • Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#​10957)
  • React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#​10898)
  • Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#​10875)
  • Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#​10812)
  • Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#​10891)
  • Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#​10956, #​10952)
  • Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#​10931)

🔧 Maintenance & Chores

  • HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#​10861)
  • Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#​10939)
  • CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#​10907, #​10911, #​10916, #​10927, #​10935, #​10983)
  • Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#​10925, #​10914, #​10958)
  • Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#​10890, #​10889, #​10921, #​10945, #​10905, #​10933, #​10915, #​10887, #​10955)
  • Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#​10871, #​10879, #​10918, #​10919, #​10934, #​10947, #​10954, #​10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

sveltejs/svelte (svelte)

v5.56.1

Compare Source

Patch Changes
  • fix: error at compile time on duplicate snippet/declaration tag definitions (#​18351)

  • fix: parse declaration tag contents more robustly (#​18353)

  • fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#​18348)

  • fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#​18348)

  • fix: tolerate whitespace before let/const in declaration tags (#​18348)

  • fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#​18350)

  • fix: more robust parsing of declaration tags with regards to type (#​18330)

  • fix: preserve newlines in spread input values when the type attribute is applied after value (#​18345)

  • fix: update SvelteURLSearchParams when setting duplicate keys to the same joined value (#​18336)

  • fix: check references for blockers on server, too (#​18352)

privatenumber/tsx (tsx)

v4.22.4

Compare Source

Bug Fixes
  • resolve CommonJS directory requires inside dependencies (#​803) (1ce8463)

This release is also available on:

vitejs/vite (vite)

v8.0.16

Compare Source

Bug Fixes

v8.0.15

Compare Source

Features
Bug Fixes
  • capitalize error messages and remove spurious space in parse error (#​22488) (85a0eff)
  • deps: update all non-major dependencies (#​22511) (2686d7d)
  • dev: fix html-proxy cache key mismatch for /@​fs/ HTML paths (#​21762) (47c4213)
  • glob: error on relative glob in virtual module when no files match (#​22497) (5c8e98f)
  • optimizer: close the rolldown bundle when write() rejects (#​22528) (e3cfb9d)
  • resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#​22509) (40985f1)
Miscellaneous Chores
Code Refactoring
vitest-dev/vitest (vitest)

v4.1.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Jun 1, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Jun 1, 2026

Deploy Preview for pauseai canceled.

Name Link
🔨 Latest commit cbd11d1
🔍 Latest deploy log https://app.netlify.com/projects/pauseai/deploys/6a22cc2da5cc27000750f2d4

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a1c49db to 8a88fa3 Compare June 2, 2026 06:48
@renovate renovate Bot changed the title Update dependency tsx to ^4.22.4 Update all non-major dependencies Jun 2, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from ef95fc3 to 03ab5b9 Compare June 5, 2026 08:58
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 03ab5b9 to cbd11d1 Compare June 5, 2026 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants