Skip to content

Bump npm deps & migrate to vitest#359

Merged
rodlukas merged 4 commits intomasterfrom
dependabot/npm_and_yarn/frontend/npm-all-9f3e5fd4a9
Apr 18, 2026
Merged

Bump npm deps & migrate to vitest#359
rodlukas merged 4 commits intomasterfrom
dependabot/npm_and_yarn/frontend/npm-all-9f3e5fd4a9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026

Bumps the npm-all group with 6 updates in the /frontend directory:

Package From To
@sentry/browser 10.48.0 10.49.0
eslint-plugin-react-hooks 7.0.1 7.1.0
msw 2.13.3 2.13.4
postcss 8.5.9 8.5.10
typescript 6.0.2 6.0.3
webpack 5.106.1 5.106.2

Updates @sentry/browser from 10.48.0 to 10.49.0

Release notes

Sourced from @​sentry/browser's releases.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Commits
  • 745af79 release: 10.49.0
  • 46dcef1 Merge pull request #20348 from getsentry/prepare-release/10.49.0
  • bf4e188 meta(changelog): Update changelog for 10.49.0
  • 5f72df5 feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation...
  • 50438f9 feat(browser): Emit web vitals as streamed spans (#19827)
  • 3332fec fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory...
  • 684a41f ref(opentelemetry): Replace @opentelemetry/resources with inline `getSentry...
  • 8b2a9dc ci: Remove Docker container for Verdaccio package publishing (#20329)
  • 0007c7b ci: Extract test names for flaky test issues (#20298)
  • 9b9d65c chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
  • Additional commits viewable in compare view

Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.0

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Commits

Updates msw from 2.13.3 to 2.13.4

Release notes

Sourced from msw's releases.

v2.13.4 (2026-04-16)

Bug Fixes

Commits

Updates postcss from 8.5.9 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits

Updates typescript from 6.0.2 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • See full diff in compare view

Updates webpack from 5.106.1 to 5.106.2

Release notes

Sourced from webpack's releases.

v5.106.2

Patch Changes

  • CSS @​import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @​imported by a "style" parent. (by @​xiaoxiaojx in #20838)

  • Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @​xiaoxiaojx in #20801)

  • Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @​xiaoxiaojx in #20821)

  • Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @​xiaoxiaojx in #20823)

  • Migrate from mime-types to mime-db. (by @​alexander-akait in #20812)

  • Handle @charset at-rules in CSS modules. (by @​alexander-akait in #20831)

  • Marked all experimental options in types. (by @​alexander-akait in #20814)

Changelog

Sourced from webpack's changelog.

5.106.2

Patch Changes

  • CSS @​import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @​imported by a "style" parent. (by @​xiaoxiaojx in #20838)

  • Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @​xiaoxiaojx in #20801)

  • Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @​xiaoxiaojx in #20821)

  • Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @​xiaoxiaojx in #20823)

  • Migrate from mime-types to mime-db. (by @​alexander-akait in #20812)

  • Handle @charset at-rules in CSS modules. (by @​alexander-akait in #20831)

  • Marked all experimental options in types. (by @​alexander-akait in #20814)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-all group across 1 directory with 6 updates
3c2d368 
Bumps the npm-all group with 6 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.48.0` | `10.49.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.1` | `7.1.0` |
| [msw](https://github.com/mswjs/msw) | `2.13.3` | `2.13.4` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.10` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` |
| [webpack](https://github.com/webpack/webpack) | `5.106.1` | `5.106.2` |



Updates `@sentry/browser` from 10.48.0 to 10.49.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.48.0...10.49.0)

Updates `eslint-plugin-react-hooks` from 7.0.1 to 7.1.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)

Updates `msw` from 2.13.3 to 2.13.4
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.13.3...v2.13.4)

Updates `postcss` from 8.5.9 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.10)

Updates `typescript` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v6.0.3)

Updates `webpack` from 5.106.1 to 5.106.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.106.1...v5.106.2)

---
updated-dependencies:
- dependency-name: "@sentry/browser"
  dependency-version: 10.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: msw
  dependency-version: 2.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: webpack
  dependency-version: 5.106.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 17, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 18, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@rodlukas rodlukas changed the title Bump the npm-all group across 1 directory with 6 updates Bump npm deps & migrate to vitest Apr 18, 2026
@rodlukas rodlukas enabled auto-merge (squash) April 18, 2026 10:58
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 18, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.18%. Comparing base (3bf18ff) to head (9574ef8).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master     #359   +/-   ##
=======================================
  Coverage   90.18%   90.18%           
=======================================
  Files          17       17           
  Lines        1161     1161           
=======================================
  Hits         1047     1047           
  Misses        114      114

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@rodlukas rodlukas merged commit ba2d64d into master Apr 18, 2026
9 checks passed
@rodlukas rodlukas deleted the dependabot/npm_and_yarn/frontend/npm-all-9f3e5fd4a9 branch April 18, 2026 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rodlukas