An open index of dependabot pull requests across open source projects.

dev: bump the safe group across 1 directory with 9 updates

Open
Number: #7657
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: June 19, 2025 at 12:12 PM UTC
(12 months ago)
Updated: June 19, 2025 at 12:12 PM UTC
(12 months ago)
Labels:
dependencies javascript
Description:

Bumps the safe group with 9 updates in the / directory:

Package From To
@sentry/react 9.27.0 9.30.0
query-string 9.2.0 9.2.1
@storybook/addon-actions 9.0.6 9.0.8
@storybook/cli 9.0.6 9.0.12
cypress 14.4.1 14.5.0
eslint-plugin-prettier 5.4.1 5.5.0
jest 30.0.0 30.0.2
pg 8.16.0 8.16.1
stylelint 16.20.0 16.21.0

Updates @sentry/react from 9.27.0 to 9.30.0

Release notes

Sourced from @​sentry/react's releases.

9.30.0

  • feat(nextjs): Add URL to tags of server components and generation functions issues (#16500)
  • feat(nextjs): Ensure all packages we auto-instrument are externalized (#16552)
  • feat(node): Automatically enable vercelAiIntegration when ai module is detected (#16565)
  • feat(node): Ensure modulesIntegration works in more environments (#16566)
  • feat(core): Don't gate user on logs with sendDefaultPii (#16527)
  • feat(browser): Add detail to measure spans and add regression tests (#16557)
  • feat(node): Update Vercel AI span attributes (#16580)
  • fix(opentelemetry): Ensure only orphaned spans of sent spans are sent (#16590)

Bundle size 📦

Path Size
@​sentry/browser 23.43 KB
@​sentry/browser - with treeshaking flags 23.2 KB
@​sentry/browser (incl. Tracing) 37.88 KB
@​sentry/browser (incl. Tracing, Replay) 75.08 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.33 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 79.74 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 91.52 KB
@​sentry/browser (incl. Feedback) 39.77 KB
@​sentry/browser (incl. sendFeedback) 28.03 KB
@​sentry/browser (incl. FeedbackAsync) 32.8 KB
@​sentry/react 25.15 KB
@​sentry/react (incl. Tracing) 39.82 KB
@​sentry/vue 27.7 KB
@​sentry/vue (incl. Tracing) 39.7 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.88 KB
CDN Bundle (incl. Tracing) 38.05 KB
CDN Bundle (incl. Tracing, Replay) 73.03 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.32 KB
CDN Bundle - uncompressed 72.74 KB
CDN Bundle (incl. Tracing) - uncompressed 112.6 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 223.9 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 236.42 KB
@​sentry/nextjs (client) 41.44 KB
@​sentry/sveltekit (client) 38.36 KB
@​sentry/node 147.12 KB
@​sentry/node - without tracing 96.09 KB
@​sentry/aws-serverless 121.25 KB

9.29.0

Important Changes

  • feat(browser): Update web-vitals to 5.0.2 (#16492)

This release upgrades the web-vitals library to version 5.0.2. This upgrade could slightly change the collected web vital values and potentially also influence alerts and performance scores in the Sentry UI.

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

9.30.0

  • feat(nextjs): Add URL to tags of server components and generation functions issues (#16500)
  • feat(nextjs): Ensure all packages we auto-instrument are externalized (#16552)
  • feat(node): Automatically enable vercelAiIntegration when ai module is detected (#16565)
  • feat(node): Ensure modulesIntegration works in more environments (#16566)
  • feat(core): Don't gate user on logs with sendDefaultPii (#16527)
  • feat(browser): Add detail to measure spans and add regression tests (#16557)
  • feat(node): Update Vercel AI span attributes (#16580)
  • fix(opentelemetry): Ensure only orphaned spans of sent spans are sent (#16590)

9.29.0

Important Changes

  • feat(browser): Update web-vitals to 5.0.2 (#16492)

This release upgrades the web-vitals library to version 5.0.2. This upgrade could slightly change the collected web vital values and potentially also influence alerts and performance scores in the Sentry UI.

Other Changes

  • feat(deps): Bump @​sentry/rollup-plugin from 3.4.0 to 3.5.0 (#16524)
  • feat(ember): Stop warning for onError usage (#16547)
  • feat(node): Allow to force activate vercelAiIntegration (#16551)
  • feat(node): Introduce ignoreLayersType option to koa integration (#16553)
  • fix(browser): Ensure suppressTracing does not leak when async (#16545)
  • fix(vue): Ensure root component render span always ends (#16488)

9.28.1

  • feat(deps): Bump @​sentry/cli from 2.45.0 to 2.46.0 (#16516)
  • fix(nextjs): Avoid tracing calls to symbolication server on dev (#16533)
  • fix(sveltekit): Add import attribute for node exports (#16528)

Work in this release was contributed by @​eltigerchino. Thank you for your contribution!

9.28.0

Important Changes

  • feat(nestjs): Stop creating spans for TracingInterceptor (#16501)

With this change we stop creating spans for TracingInterceptor as this interceptor only serves as an internal helper and adds noise for the user.

  • feat(node): Update vercel ai spans as per new conventions (#16497)

This feature ships updates to the span names and ops to better match OpenTelemetry. This should make them more easily accessible to the new agents module view we are building.

Other Changes

... (truncated)

Commits
  • a5ca396 release: 9.30.0
  • 009acbd Merge pull request #16592 from getsentry/prepare-release/9.30.0
  • 7464721 meta(changelog): Update changelog for 9.30.0
  • c4dcfa3 feat(nextjs): Add URL to tags of server components and generation functions i...
  • 66436bc feat(core): Don't gate user on logs with sendDefaultPii (#16527)
  • a26bdaf feat(node): Update Vercel AI span attributes (#16580)
  • a744088 fix(opentelemetry): Ensure only orphaned spans of sent spans are sent (#16590)
  • b615f61 feat(nextjs): Ensure all packages we auto-instrument are externalized (#16552)
  • 4e7c7ef feat(browser): Add detail to measure spans and add regression tests (#16557)
  • d35030d feat(node): Automatically enable vercelAiIntegration when ai module is de...
  • Additional commits viewable in compare view

Updates query-string from 9.2.0 to 9.2.1

Release notes

Sourced from query-string's releases.

v9.2.1

  • Fix stringifyUrl not respecting passed in options 38dae7b

https://github.com/sindresorhus/query-string/compare/v9.2.0...v9.2.1

Commits

Updates @storybook/addon-actions from 9.0.6 to 9.0.8

Release notes

Sourced from @​storybook/addon-actions's releases.

v9.0.8

9.0.8

[!NOTE]
Version 9.0.7 was skipped because of a bad release of eslint-plugin-storybook.

Changelog

Sourced from @​storybook/addon-actions's changelog.

9.0.8

[!NOTE]
Version 9.0.7 was skipped because of a bad release of eslint-plugin-storybook.

Commits
  • 95bdbee Bump version from "9.0.7" to "9.0.8" [skip ci]
  • a882f2f Artificially bump all versions on the main branch from 9.0.6 to 9.0.7, to s...
  • See full diff in compare view

Updates @storybook/cli from 9.0.6 to 9.0.12

Release notes

Sourced from @​storybook/cli's releases.

v9.0.12

9.0.12

v9.0.11

9.0.11

v9.0.10

9.0.10

v9.0.9

9.0.9

v9.0.8

9.0.8

[!NOTE]
Version 9.0.7 was skipped because of a bad release of eslint-plugin-storybook.

Commits

Updates cypress from 14.4.1 to 14.5.0

Release notes

Sourced from cypress's releases.

v14.5.0

Changelog: https://docs.cypress.io/app/references/changelog#14-5-0

Commits

Updates eslint-plugin-prettier from 5.4.1 to 5.5.0

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.0

Minor Changes

New Contributors

Full Changelog: https://github.com/prettier/eslint-plugin-prettier/compare/v5.4.1...v5.5.0

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.0

Minor Changes

Commits

Updates jest from 30.0.0 to 30.0.2

Release notes

Sourced from jest's releases.

30.0.2

What's Changed

Fixes

  • [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
  • [jest-util] Make garbage collection protection property writable (#15689)

Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

Jest 30.0.1

What's Changed

Features

  • [jest-resolver] Implement the defaultAsyncResolver (#15679)

Fixes

  • [jest-resolver] Resolve builtin modules correctly (#15683)
  • [jest-environment-node, jest-util] Avoid setting globals cleanup protection symbol when feature is off (#15684)

Chore & Maintenance

  • [*] Remove and deprecate jest-repl package (#15673)
  • [jest-resolver] Replace custom isBuiltinModule with node's isBuiltin (#15685)

New Contributors

Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

Changelog

Sourced from jest's changelog.

30.0.2

Fixes

  • [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
  • [jest-util] Make garbage collection protection property writable (#15689)

30.0.1

Features

  • [jest-resolver] Implement the defaultAsyncResolver (#15679)

Fixes

  • [jest-resolver] Resolve builtin modules correctly (#15683)
  • [jest-environment-node, jest-util] Avoid setting globals cleanup protection symbol when feature is off (#15684)

Chore & Maintenance

  • [*] Remove and deprecate jest-repl package (#15673)
  • [jest-resolver] Replace custom isBuiltinModule with node's isBuiltin (#15685)
Commits

Updates pg from 8.16.0 to 8.16.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

Commits

Updates stylelint from 16.20.0 to 16.21.0

Release notes

Sourced from stylelint's releases.

16.21.0

It rounds out the message secondary option and marks it as stable, adds 1 new option to a rule, and fixes 4 bugs.

Changelog

Sourced from stylelint's changelog.

16.21.0 - 2025-06-19

It rounds out the message secondary option and marks it as stable, adds 1 new option to a rule, and fixes 4 bugs.

Commits
  • 90ffc0b 16.21.0
  • e34a2a3 Prepare 16.21.0 (#8598)
  • 18c9d63 Fix selector-pseudo-*-no-unknown false positives for form control styling s...
  • b006c58 Fix cache configuration property not being respected (#8599)
  • b764c23 Fix named-grid-areas-no-invalid false positives for interpolated grid-templ...
  • 103c2d2 Add ignore: ["after-custom-property"] to `custom-property-empty-line-before...
  • 1f9791b Document custom-property-empty-line-before ignore examples correctly (#8628)
  • 8a9a830 Fix fastest-levenshtein import when bundling (#8621)
  • 651a1b4 Document notation typo fix (#8624)
  • 93d1af1 Bump known-css-properties from 0.36.0 to 0.37.0 (#8619)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
eslint-plugin-prettier [>= 4.a, < 5]
cypress [>= 9.a, < 10]
@storybook/addon-actions [< 6.5, > 6.4.9]
jest [>= 27.5.a, < 27.6]
cypress [>= 10.a, < 11]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+532
Deletions:
-518
Package Dependencies
Ecosystem:
npm
Version Change:
9.27.0 → 9.30.0
Update Type:
Minor
Package:
pg
Ecosystem:
npm
Version Change:
8.16.0 → 8.16.1
Update Type:
Patch
Package:
cypress
Ecosystem:
npm
Version Change:
14.4.1 → 14.5.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
9.0.6 → 9.0.8
Update Type:
Patch
Ecosystem:
npm
Version Change:
5.4.1 → 5.5.0
Update Type:
Minor
Package:
stylelint
Ecosystem:
npm
Version Change:
16.20.0 → 16.21.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
9.0.6 → 9.0.12
Update Type:
Patch
Package:
jest
Ecosystem:
npm
Version Change:
30.0.0 → 30.0.2
Update Type:
Patch
Ecosystem:
npm
Version Change:
9.2.0 → 9.2.1
Update Type:
Patch
Technical Details
ID: 1929544
UUID: 2604620275
Node ID: PR_kwDOCdvj-c6bP1nz
Host: GitHub
Repository: TheThingsNetwork/lorawan-stack
Merge State: Unknown