chore(deps): bump the minor-and-patch group with 8 updates

[dependabot]

Bumps the minor-and-patch group with 8 updates:

Package	From	To
jose	6.1.2	6.1.3
@cloudflare/workers-types	4.20251202.0	4.20251205.0
@sentry/core	10.27.0	10.29.0
@typescript-eslint/eslint-plugin	8.48.0	8.49.0
@typescript-eslint/parser	8.48.0	8.49.0
msw	2.12.3	2.12.4
prettier	3.7.3	3.7.4
wrangler	4.51.0	4.53.0

Updates jose from 6.1.2 to 6.1.3

Release notes

Sourced from jose's releases.

v6.1.3

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

Changelog

Sourced from jose's changelog.

6.1.3 (2025-12-02)

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

Commits

• ebb8774 chore(release): 6.1.3
• 6303d98 refactor: avoid export * as for google closure's compiler sake
• 39c8805 chore: bump packages
• cf5726e chore: update error message
• 0154775 chore: update threat model
• d015cdf chore: add a threat model
• c5e285e chore: bump packages
• d681315 chore: bump packages
• 4ae1005 chore(deps-dev): bump glob from 11.0.3 to 11.1.0 (#831)
• aaedc25 chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#830)
• Additional commits viewable in compare view

Updates @cloudflare/workers-types from 4.20251202.0 to 4.20251205.0

Commits

• See full diff in compare view

Updates @sentry/core from 10.27.0 to 10.29.0

Release notes

Sourced from @​sentry/core's releases.

10.29.0

Important Changes

• feat(solid|solidstart): Bump accepted @​solidjs/router range (#18395)

We expanded the supported version range for @solidjs/router to include 0.14.x and 0.15.x versions.

Other Changes

• fix(logs): Add support for msg in pino integration (#18389)
• fix(node): Include system message in anthropic-ai messages span (#18332)
• fix(tracing): Add missing attributes in vercel-ai spans (#18333)

• chore(tanstackstart-react): clean up re-exported types (#18393)
• ref(core): Avoid looking up openai integration options (#17695)
• test(nuxt): Relax captured unhandled error assertion (#18397)
• test(tanstackstart-react): Set up E2E test application (#18358)

Bundle size 📦

Path	Size
@​sentry/browser	24.22 KB
@​sentry/browser - with treeshaking flags	22.76 KB
@​sentry/browser (incl. Tracing)	40.57 KB
@​sentry/browser (incl. Tracing, Profiling)	45.05 KB
@​sentry/browser (incl. Tracing, Replay)	78.08 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	68.05 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	82.65 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	94.61 KB
@​sentry/browser (incl. Feedback)	40.51 KB
@​sentry/browser (incl. sendFeedback)	28.8 KB
@​sentry/browser (incl. FeedbackAsync)	33.66 KB
@​sentry/react	25.9 KB
@​sentry/react (incl. Tracing)	42.72 KB
@​sentry/vue	28.56 KB
@​sentry/vue (incl. Tracing)	42.32 KB
@​sentry/svelte	24.24 KB
CDN Bundle	26.57 KB
CDN Bundle (incl. Tracing)	41.22 KB
CDN Bundle (incl. Tracing, Replay)	76.9 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	82.23 KB
CDN Bundle - uncompressed	78.09 KB
CDN Bundle (incl. Tracing) - uncompressed	122.4 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	235.71 KB

... (truncated)

Changelog

Sourced from @​sentry/core's changelog.

10.29.0

Important Changes

• feat(solid|solidstart): Bump accepted @​solidjs/router range (#18395)

We expanded the supported version range for @solidjs/router to include 0.14.x and 0.15.x versions.

Other Changes

• fix(logs): Add support for msg in pino integration (#18389)
• fix(node): Include system message in anthropic-ai messages span (#18332)
• fix(tracing): Add missing attributes in vercel-ai spans (#18333)

• chore(tanstackstart-react): clean up re-exported types (#18393)
• ref(core): Avoid looking up openai integration options (#17695)
• test(nuxt): Relax captured unhandled error assertion (#18397)
• test(tanstackstart-react): Set up E2E test application (#18358)

10.28.0

Important Changes

• feat(core): Make matcher parameter optional in makeMultiplexedTransport (#10798)

The matcher parameter in makeMultiplexedTransport is now optional with a sensible default. This makes it much easier to use the multiplexed transport for sending events to multiple DSNs based on runtime configuration.

Before:

import { makeFetchTransport, makeMultiplexedTransport } from '@sentry/browser';
const EXTRA_KEY = 'ROUTE_TO';
const transport = makeMultiplexedTransport(makeFetchTransport, args => {
const event = args.getEvent();
if (event?.extra?.[EXTRA_KEY] && Array.isArray(event.extra[EXTRA_KEY])) {
return event.extra[EXTRA_KEY];
}
return [];
});
Sentry.init({
transport,
// ... other options
</tr></table>

... (truncated)

Commits

• 3529d46 release: 10.29.0
• 7b3b613 Merge pull request #18407 from getsentry/prepare-release/10.29.0
• 477f6ad meta(changelog): Update changelog for 10.29.0
• cf5c4ba Merge pull request #18406 from getsentry/manual-master-sync-dev
• 3c5d47f Merge branch 'develop' into manual-master-sync-dev
• 862f415 test(nuxt): Relax captured unhandled error assertion (#18397)
• b6eb205 fix(node): Include system message in anthropic-ai messages span (#18332)
• 65f5006 fix(tracing): Add missing attributes in vercel-ai spans (#18333)
• df4c541 feat(solid|solidstart): Bump accepted @​solidjs/router range (#18395)
• f961771 ref(core): Avoid looking up openai integration options (#17695)
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.48.0 to 8.49.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

• eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

• eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
• eslint-plugin: honor ignored base types on generic classes (#11767)
• eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

• Josh Goldberg
• OleksandraKordonets
• SangheeSon @​Higangssh
• tao

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

🩹 Fixes

• eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)
• eslint-plugin: honor ignored base types on generic classes (#11767)
• eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

❤️ Thank You

• Josh Goldberg
• OleksandraKordonets
• SangheeSon @​Higangssh
• tao

You can read about our versioning strategy and releases on our website.

Commits

• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• 56149a2 feat(eslint-plugin): use Intl.Segmenter instead of graphemer (#11804)
• 34a49a4 fix(deps): update dependency prettier to v3.7.2 (#11820)
• d2d7ace docs: fixes bad link to jest docs in unbound-method rule page (#11823)
• 8fe3445 chore(release): publish 8.48.1
• 5ac66a6 fix(eslint-plugin): revert "[no-redundant-type-constituents] use assignabilit...
• 906cc3c fix(eslint-plugin): [restrict-template-expressions] check base types in allow...
• 16cf0f7 test(eslint-plugin): [consistent-type-exports] add more shadowed imports test...
• 0db02ac fix(eslint-plugin): honor ignored base types on generic classes (#11767)
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.48.0 to 8.49.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

• eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

• eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
• eslint-plugin: honor ignored base types on generic classes (#11767)
• eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

• Josh Goldberg
• OleksandraKordonets
• SangheeSon @​Higangssh
• tao

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• 8fe3445 chore(release): publish 8.48.1
• See full diff in compare view

Updates msw from 2.12.3 to 2.12.4

Release notes

Sourced from msw's releases.

v2.12.4 (2025-12-03)

Bug Fixes

• handle incomplete localStorage in Node.js v25 (#2636) (3da2c762abb923eda60ad220f0534354d1683678) @​rvagg

Commits

• 1a63f17 chore(release): v2.12.4
• 3da2c76 fix: handle incomplete localStorage in Node.js v25 (#2636)
• See full diff in compare view

Updates prettier from 3.7.3 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

• Fix comment in union type gets duplicated by @​fisker in prettier/prettier#18393
• Fix unstable comment print in union type by @​fisker in prettier/prettier#18395
• Avoid quote around LWC interpolations by @​kovsu in prettier/prettier#18383

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits

• 7848357 Release 3.7.4
• 7686c59 Release @​prettier/plugin-hermes & @​prettier/plugin-oxc v0.1.3
• fe49434 Remove dead code checking union/intersection types length (#18396)
• ca02b37 Fix unstable comment print (#18395)
• 7efb988 Fix comment in union type get duplicated (#18393)
• cfa92c1 Update dependency @​angular/compiler to v21.0.2 (#18392)
• 1de2737 Update dependency yaml to v2.8.2 (#18391)
• 706aa4e Switch js parse postprocess to onEnter (#18382)
• d3eb2b2 Reuse arrays in visitor keys (#18386)
• c45fef1 Fix LWC attribute with --embedded-language-formatting off (#18383)
• Additional commits viewable in compare view

Updates wrangler from 4.51.0 to 4.53.0

Release notes

Sourced from wrangler's releases.

wrangler@4.53.0

Minor Changes

• #11500 af54c63 Thanks @​dario-piotrowicz! - Add new autoconfig_summary field to the deploy output entry

  This change augments wrangler deploy output being printed to WRANGLER_OUTPUT_FILE_DIRECTORY or WRANGLER_OUTPUT_FILE_PATH to also include a new autoconfig_summary field containing the possible summary details for the autoconfig process (the field is undefined if autoconfig didn't run).

  Note: the field is experimental and could change while autoconfig is not GA

• #11477 9988cc9 Thanks @​ascorbic! - Support Nuxt in autoconfig

• #11472 ce295bf Thanks @​dario-piotrowicz! - Support Qwik projects in autoconfig

• #10937 9514c9a Thanks @​ReppCodes! - Add support for "targeted" placement mode with region, host, and hostname fields

  This change adds a new mode to placement configuration. You can specify one of the following fields to target specific external resources for Worker placement:

  • region: Specify a region identifier (e.g., "aws:us-east-1") to target a region from another cloud service provider
  • host: Specify a host with (required) port (e.g., "example.com:8123") to target a TCP service
  • hostname: Specify a hostname (e.g., "example.com") to target an HTTP resource

  These fields are mutually exclusive - only one can be specified at a time.

  Example configuration:

  [placement]
  host = "example.com:8123"

• #11498 ac861f8 Thanks @​penalosa! - Add React Router support in autoconfig

• #11506 79d30d4 Thanks @​vicb! - Set the target JS version to ES2024

Patch Changes

• #11393 45480b1 Thanks @​alsuren! - improved --help text for wrangler d1 subcommands

• #11523 94c67e8 Thanks @​jamesopstad! - fix: types from @​cloudflare/workers-utils not being exported correctly from Wrangler

• #11483 f550b62 Thanks @​edmundhung! - stop running npm install with --legacy-peer-deps flag when setting up a project

• Updated dependencies [819e287, 56e78c8, 0aa959a]:

  • @​cloudflare/unenv-preset@​2.7.13
  • miniflare@4.20251202.1

wrangler@4.52.1

Patch Changes

• #11504 7e80340 Thanks @​dario-piotrowicz! - Fix wrangler deploy failing for new workers containing environment variables or bindings

... (truncated)

Commits

• 8672321 Version Packages (#11511)
• 9988cc9 Support Nuxt in autoconfig (#11477)
• 94c67e8 fix: types from @​cloudflare/workers-utils not being exported correctly from W...
• 0faacee Add outputDir to the deploy output entry's autoconfig_summary field (#11516)
• 45480b1 CFSQL-1406 update wrangler d1 ... --help output from Cloudflare Docs site (...
• 56e78c8 SQC-707 Fix npx wrangler dev with Hyperdrive binding slow latency on (#11443)
• 0aa959a Use native node:vm module when available (#10621)
• af54c63 Add new autoconfig_summary field to the deploy output entry (#11500)
• 819e287 Use workerd node:console when available (#10606)
• f550b62 fix(create-cloudflare): install dependencies without --legacy-peer-deps (#11483)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions