Skip to content

Conversation

@ggrossetie
Copy link
Collaborator

@ggrossetie ggrossetie commented Nov 27, 2025

This PR contains the following updates:

Package Type Update Change
@graphql-tools/schema (source) dependencies major ^9.0.12 -> ^10.0.0
@sentry/node (source) dependencies major ^9.2.0 -> ^10.0.0
@sentry/profiling-node (source) dependencies major ^9.2.0 -> ^10.0.0
@types/jest (source) devDependencies major ~29.5 -> ~30.0.0
bcryptjs dependencies major ^2.4.3 -> ^3.0.0
body-parser dependencies major ^1.18.3 -> ^2.0.0
css-tree dependencies major ^2.3.1 -> ^3.0.0
dompurify dependencies major ^2.4.3 -> ^3.0.0
dotenv dependencies major ^16.4.5 -> ^17.0.0
eslint (source) devDependencies major ~8.57 -> ~9.39.0
eslint-plugin-jest devDependencies major ~28.14.0 -> ~29.2.0
express (source) dependencies major ^4.16.4 -> ^5.0.0
jest (source) devDependencies major ~29.7 -> ~30.2.0
jest-environment-node (source) devDependencies major ~29.7 -> ~30.2.0
jsdom dependencies major ^21.0.0 -> ^27.0.0
node (source) volta major 22.21.1 -> 24.11.1
npm (source) volta major 10.9.4 -> 11.6.4
pino (source) dependencies major ^7.11.0 -> ^10.0.0
pino-http dependencies major ^7.0.0 -> ^11.0.0

Release Notes

ardatan/graphql-tools (@​graphql-tools/schema)

v10.0.30

Compare Source

Patch Changes

v10.0.29

Compare Source

Patch Changes

v10.0.28

Compare Source

Patch Changes

v10.0.27

Compare Source

Patch Changes

v10.0.26

Compare Source

Patch Changes

v10.0.25

Compare Source

Patch Changes

v10.0.24

Compare Source

Patch Changes

v10.0.23

Compare Source

Patch Changes

v10.0.22

Compare Source

Patch Changes

v10.0.21

Compare Source

Patch Changes

v10.0.20

Compare Source

Patch Changes

v10.0.19

Compare Source

Patch Changes

v10.0.18

Compare Source

Patch Changes

v10.0.17

Compare Source

Patch Changes

v10.0.16

Compare Source

Patch Changes

v10.0.15

Compare Source

Patch Changes

v10.0.14

Compare Source

Patch Changes

v10.0.13

Compare Source

Patch Changes

v10.0.12

Compare Source

Patch Changes

v10.0.11

Compare Source

Patch Changes

v10.0.10

Compare Source

Patch Changes

v10.0.9

Compare Source

Patch Changes

v10.0.8

Compare Source

Patch Changes

v10.0.7

Compare Source

Patch Changes

v10.0.6

Compare Source

Patch Changes

v10.0.5

Compare Source

Patch Changes

v10.0.4

Compare Source

Patch Changes

v10.0.3

Compare Source

Patch Changes

v10.0.2

Compare Source

Patch Changes

v10.0.1

Compare Source

Patch Changes

v10.0.0

Compare Source

Major Changes
Patch Changes
getsentry/sentry-javascript (@​sentry/node)

v10.27.0

Compare Source

Important Changes
Other Changes
  • feat(core): Add gibibyte and pebibyte to InformationUnit type (#​18241)
  • feat(core): Add scope attribute APIs (#​18165)
  • feat(core): Re-add _experiments.enableLogs option (#​18299)
  • feat(core): Use maxValueLength on error messages (#​18301)
  • feat(deps): bump @​sentry/bundler-plugin-core from 4.3.0 to 4.6.1 (#​18273)
  • feat(deps): bump @​sentry/cli from 2.56.0 to 2.58.2 (#​18271)
  • feat(node): Add tracing support for AzureOpenAI (#​18281)
  • feat(node): Fix local variables capturing for out-of-app frames (#​18245)
  • fix(core): Add a PromiseBuffer for incoming events on the client (#​18120)
  • fix(core): Always redact content of sensitive headers regardless of sendDefaultPii (#​18311)
  • fix(metrics): Update return type of beforeSendMetric (#​18261)
  • fix(nextjs): universal random tunnel path support (#​18257)
  • ref(react): Add more guarding against wildcards in lazy route transactions (#​18155)
  • chore(deps): bump glob from 11.0.1 to 11.1.0 in /packages/react-router (#​18243)
Internal Changes - build(deps): bump hono from 4.9.7 to 4.10.3 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#​18038](https://github.com/getsentry/sentry-javascript/pull/18038)) - chore: Add `bump_otel_instrumentations` cursor command ([#​18253](https://github.com/getsentry/sentry-javascript/pull/18253)) - chore: Add external contributor to CHANGELOG.md ([#​18297](https://github.com/getsentry/sentry-javascript/pull/18297)) - chore: Add external contributor to CHANGELOG.md ([#​18300](https://github.com/getsentry/sentry-javascript/pull/18300)) - chore: Do not update opentelemetry ([#​18254](https://github.com/getsentry/sentry-javascript/pull/18254)) - chore(angular): Add Angular 21 Support ([#​18274](https://github.com/getsentry/sentry-javascript/pull/18274)) - chore(deps): bump astro from 4.16.18 to 5.15.9 in /dev-packages/e2e-tests/test-applications/cloudflare-astro ([#​18259](https://github.com/getsentry/sentry-javascript/pull/18259)) - chore(dev-deps): Update some dev dependencies ([#​17816](https://github.com/getsentry/sentry-javascript/pull/17816)) - ci(deps): Bump actions/create-github-app-token from 2.1.1 to 2.1.4 ([#​17825](https://github.com/getsentry/sentry-javascript/pull/17825)) - ci(deps): bump actions/setup-node from 4 to 6 ([#​18077](https://github.com/getsentry/sentry-javascript/pull/18077)) - ci(deps): bump actions/upload-artifact from 4 to 5 ([#​18075](https://github.com/getsentry/sentry-javascript/pull/18075)) - ci(deps): bump github/codeql-action from 3 to 4 ([#​18076](https://github.com/getsentry/sentry-javascript/pull/18076)) - doc(sveltekit): Update documentation link for SvelteKit guide ([#​18298](https://github.com/getsentry/sentry-javascript/pull/18298)) - test(e2e): Fix astro config in test app ([#​18282](https://github.com/getsentry/sentry-javascript/pull/18282)) - test(nextjs): Remove debug logs from e2e test ([#​18250](https://github.com/getsentry/sentry-javascript/pull/18250))

Work in this release was contributed by @​bignoncedric and @​adam-kov. Thank you for your contributions!

v10.26.0

Compare Source

Important Changes
  • feat(core): Instrument LangGraph Agent (#​18114)

Adds support for instrumenting LangGraph StateGraph operations in Node. The LangGraph integration can be configured as follows:

Sentry.init({
  dsn: '__DSN__',
  sendDefaultPii: false, // Even with PII disabled globally
  integrations: [
    Sentry.langGraphIntegration({
      recordInputs: true, // Force recording input messages
      recordOutputs: true, // Force recording response text
    }),
  ],
});
  • feat(cloudflare/vercel-edge): Add manual instrumentation for LangGraph (#​18112)

Instrumentation for LangGraph in Cloudflare Workers and Vercel Edge environments is supported by manually calling instrumentLangGraph:

import * as Sentry from '@​sentry/cloudflare'; // or '@​sentry/vercel-edge'
import { StateGraph, START, END, MessagesAnnotation } from '@​langchain/langgraph';

// Create and instrument the graph
const graph = new StateGraph(MessagesAnnotation)
  .addNode('agent', agentFn)
  .addEdge(START, 'agent')
  .addEdge('agent', END);

Sentry.instrumentLangGraph(graph, {
  recordInputs: true,
  recordOutputs: true,
});

const compiled = graph.compile({ name: 'weather_assistant' });

await compiled.invoke({
  messages: [{ role: 'user', content: 'What is the weather in SF?' }],
});
  • feat(node): Add OpenAI SDK v6 support (#​18244)
Other Changes
  • feat(core): Support OpenAI embeddings API (#​18224)
  • feat(browser-utils): bump web-vitals to 5.1.0 (#​18091)
  • feat(core): Support truncation for LangChain integration request messages (#​18157)
  • feat(metrics): Add default server.address attribute on server runtimes (#​18242)
  • feat(nextjs): Add URL to server-side transaction events (#​18230)
  • feat(node-core): Add mechanism to prevent wrapping ai providers multiple times(#​17972)
  • feat(replay): Bump limit for minReplayDuration (#​18190)
  • fix(browser): Add ok status to successful idleSpans (#​18139)
  • fix(core): Check fetch support with data URL (#​18225)
  • fix(core): Decrease number of Sentry stack frames for messages from captureConsoleIntegration (#​18096)
  • fix(core): Emit processed metric (#​18222)
  • fix(core): Ensure logs past MAX_LOG_BUFFER_SIZE are not swallowed (#​18207)
  • fix(core): Ensure metrics past MAX_METRIC_BUFFER_SIZE are not swallowed (#​18212)
  • fix(core): Fix logs and metrics flush timeout starvation with continuous logging (#​18211)
  • fix(core): Flatten gen_ai.request.available_tools in google-genai (#​18194)
  • fix(core): Stringify available tools sent from vercelai (#​18197)
  • fix(core/vue): Detect and skip normalizing Vue VNode objects with high normalizeDepth (#​18206)
  • fix(nextjs): Avoid wrapping middleware files when in standalone mode (#​18172)
  • fix(nextjs): Drop meta trace tags if rendered page is ISR (#​18192)
  • fix(nextjs): Respect PORT variable for dev error symbolication (#​18227)
  • fix(nextjs): use LRU map instead of map for ISR route cache (#​18234)
  • fix(node): tracingChannel export missing in older node versions (#​18191)
  • fix(node): Fix Spotlight configuration precedence to match specification (#​18195)
  • fix(react): Prevent navigation span leaks for consecutive navigations (#​18098)
  • ref(react-router): Deprecate ErrorBoundary exports (#​18208)
Internal Changes
  • chore: Fix missing changelog quote we use for attribution placement (#​18237)
  • chore: move tip about prioritizing issues (#​18071)
  • chore(e2e): Pin @embroider/addon-shim to 1.10.0 for the e2e ember-embroider (#​18173)
  • chore(react-router): Fix casing on deprecation notices (#​18221)
  • chore(test): Use correct testTimeout field in bundler-tests vitest config
  • chore(e2e): Bump zod in e2e tests (#​18251)
  • test(browser-integration): Fix incorrect tag value assertions (#​18162)
  • test(profiling): Add test utils to validate Profile Chunk envelope (#​18170)
  • ref(e2e-ember): Remove @embroider/addon-shim override (#​18180)
  • ref(browser): Move trace lifecycle listeners to class function (#​18231)
  • ref(browserprofiling): Move and rename profiler class to UIProfiler (#​18187)
  • ref(core): Move ai integrations from utils to tracing (#​18185)
  • ref(core): Optimize Scope.setTag bundle size and adjust test (#​18182)

v10.25.0

Compare Source

  • feat(browser): Include Spotlight in development bundles (#​18078)
  • feat(cloudflare): Add metrics exports (#​18147)
  • feat(core): Truncate request string inputs in OpenAI integration (#​18136)
  • feat(metrics): Add missing metric node exports (#​18149)
  • feat(node): Add maxCacheKeyLength to Redis integration (remove truncation) (#​18045)
  • feat(vercel-edge): Add metrics export (#​18148)
  • fix(core): Only consider exception mechanism when updating session status from event with exceptions (#​18137)
  • ref(browser): Remove truncation when not needed (#​18051)
Internal Changes
  • chore(build): Fix incorrect versions after merge (#​18154)

v10.24.0

Compare Source

Important Changes
  • feat(metrics): Add top level option enableMetrics and beforeSendMetric (#​18088)

    This PR moves enableMetrics and beforeSendMetric out of the _experiments options.
    The metrics feature will now be enabled by default (none of our integrations will auto-emit metrics as of now), but you can disable sending metrics via enableMetrics: false.
    Metric options within _experiments got deprecated but will still work as of now, they will be removed with the next major version of our SDKs.

Other Changes
  • feat(aws): Add SENTRY_LAYER_EXTENSION to configure using the lambda layer extension via env variables (#​18101)
  • feat(core): Include all exception object keys instead of truncating (#​18044)
  • feat(metrics)!: Update types (#​17907)
  • feat(replay): ignore background-image when blockAllMedia is enabled (#​18019)
  • fix(nextjs): Delete css map files (#​18131)
  • fix(nextjs): Stop accessing sync props in template (#​18113)
Internal Changes
  • chore: X handle update (#​18117)
  • chore(eslint): Add eslint-plugin-regexp rule (dev-packages) (#​18063)
  • test(next): fix flakey tests (#​18100)
  • test(node-core): Proof that withMonitor doesn't create a new trace (#​18057)

v10.23.0

Compare Source

  • feat(core): Send user-agent header with envelope requests in server SDKs (#​17929)
  • feat(browser): Limit transport buffer size (#​18046)
  • feat(core): Remove default value of maxValueLength: 250 (#​18043)
  • feat(react-router): Align options with shared build time options type (#​18014)
  • fix(browser-utils): cache element names for INP (#​18052)
  • fix(browser): Capture unhandled rejection errors for web worker integration (#​18054)
  • fix(cloudflare): Ensure types for cloudflare handlers (#​18064)
  • fix(nextjs): Update proxy template wrapping (#​18086)
  • fix(nuxt): Added top-level fallback exports (#​18083)
  • fix(nuxt): check for H3 error cause before re-capturing (#​18035)
  • fix(replay): Linked errors not resetting session id (#​17854)
  • fix(tracemetrics): Bump metrics buffer to 1k (#​18039)
  • fix(vue): Make options parameter optional on attachErrorHandler (#​18072)
  • ref(core): Set span status internal_error instead of unknown_error (#​17909)
Internal Changes
  • fix(tests): un-override nitro dep version for nuxt-3 test (#​18056)
  • fix(e2e): Add p-map override to fix React Router 7 test builds (#​18068)
  • feat: Add a note to save changes before starting (#​17987)
  • test(browser): Add test for INP target name after navigation or DOM changes (#​18033)
  • chore: Add external contributor to CHANGELOG.md (#​18032)
  • chore(aws-serverless): Fix typo in timeout warning function name (#​18031)
  • chore(browser): upgrade fake-indexeddb to v6 (#​17975)
  • chore(tests): pass test flags through to the test command (#​18062)

Work in this release was contributed by @​hanseo0507. Thank you for your contribution!

v10.22.0

Compare Source

Important Changes
  • feat(node): Instrument cloud functions for firebase v2 (#​17952)

    We added instrumentation for Cloud Functions for Firebase v2, enabling automatic performance tracking and error monitoring. This will be added automatically if you have enabled tracing.

  • feat(core): Instrument LangChain AI (#​17955)

    Instrumentation was added for LangChain AI operations. You can configure what is recorded like this:

    Sentry.init({
      integrations: [
        Sentry.langChainIntegration({
          recordInputs: true, // Record prompts/messages
          recordOutputs: true, // Record responses
        }),
      ],
    });
Other Changes
  • feat(cloudflare,vercel-edge): Add support for LangChain instrumentation (#​17986)
  • feat: Align sentry origin with documentation (#​17998)
  • feat(core): Truncate request messages in AI integrations (#​17921)
  • feat(nextjs): Support node runtime on proxy files (#​17995)
  • feat(node): Pass requestHook and responseHook option to OTel (#​17996)
  • fix(core): Fix wrong async types when instrumenting anthropic's stream api (#​18007)
  • fix(nextjs): Remove usage of chalk to avoid runtime errors (#​18010)
  • fix(node): Pino capture serialized err (#​17999)
  • fix(node): Pino child loggers (#​17934)
  • fix(react): Don't trim index route / when getting pathname (#​17985)
  • fix(react): Patch spanEnd for potentially cancelled lazy-route transactions (#​17962)
Internal Changes
  • chore: Add required size_check for GH Actions (#​18009)
  • chore: Upgrade madge to v8 (#​17957)
  • test(hono): Fix hono e2e tests (#​18000)
  • test(react-router): Fix getMetaTagTransformer tests for Vitest compatibility (#​18013)
  • test(react): Add parameterized route tests for createHashRouter (#​17789)

v10.21.0

Compare Source

Important Changes
  • feat(browserProfiling): Add trace lifecycle mode for UI profiling (#​17619)

    Adds a new trace lifecycle mode for UI profiling, allowing profiles to be captured for the duration of a trace. A manual mode will be added in a future release.

  • **feat(nuxt): Instrument Database ([#&


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@ggrossetie
Copy link
Collaborator Author

ggrossetie commented Nov 27, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: graphql/package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @shelf/[email protected]
npm error Found: [email protected]
npm error node_modules/jest-environment-node
npm error   dev jest-environment-node@"~30.2.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer jest-environment-node@"28.x || 29.x" from @shelf/[email protected]
npm error node_modules/@shelf/jest-mongodb
npm error   dev @shelf/jest-mongodb@"~4.3" from the root project
npm error
npm error Conflicting peer dependency: [email protected]
npm error node_modules/jest-environment-node
npm error   peer jest-environment-node@"28.x || 29.x" from @shelf/[email protected]
npm error   node_modules/@shelf/jest-mongodb
npm error     dev @shelf/jest-mongodb@"~4.3" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2025-11-29T02_43_06_965Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2025-11-29T02_43_06_965Z-debug-0.log

@netlify
Copy link

netlify bot commented Nov 27, 2025

Deploy Preview for stylo-docs canceled.

Name Link
🔨 Latest commit 5001060
🔍 Latest deploy log https://app.netlify.com/projects/stylo-docs/deploys/692a5dc325e5230008909438

@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies branch from 4529313 to ae095b0 Compare November 28, 2025 02:43
@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies branch from ae095b0 to 5001060 Compare November 29, 2025 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants