An open index of dependabot pull requests across open source projects.

Bump the backend-minor-patch group across 1 directory with 4 updates

Open
Number: #25
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: October 03, 2026 at 08:06 AM UTC
(11 days ago)
Updated: October 03, 2026 at 08:07 AM UTC
(11 days ago)
Labels:
dependencies javascript
Description:

Bumps the backend-minor-patch group with 4 updates in the /backend directory: @sentry/node, google-auth-library, mongoose and supertest.

Updates @sentry/node from 10.74.0 to 10.75.3

Release notes

Sourced from @​sentry/node's releases.

10.75.3

  • fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)
  • chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
  • chore(v10/publish): Tag all packages as v10 (#24619)

Bundle size đŸ“¦

Path Size
@​sentry/browser 27.56 KB
@​sentry/browser - with treeshaking flags 26.04 KB
@​sentry/browser (incl. Tracing) 46.02 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.77 KB
@​sentry/browser (incl. Tracing, Profiling) 50.67 KB
@​sentry/browser (incl. Tracing, Replay) 84.38 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 74.28 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 89 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 101.33 KB
@​sentry/browser (incl. Feedback) 44.33 KB
@​sentry/browser (incl. sendFeedback) 32.25 KB
@​sentry/browser (incl. FeedbackAsync) 37.27 KB
@​sentry/browser (incl. Metrics) 28.63 KB
@​sentry/browser (incl. Logs) 28.84 KB
@​sentry/browser (incl. Metrics & Logs) 29.52 KB
@​sentry/react 29.32 KB
@​sentry/react (incl. Tracing) 48.28 KB
@​sentry/vue 32.88 KB
@​sentry/vue (incl. Tracing) 47.98 KB
@​sentry/svelte 27.58 KB
CDN Bundle 29.87 KB
CDN Bundle (incl. Tracing) 47.92 KB
CDN Bundle (incl. Logs, Metrics) 31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.82 KB
CDN Bundle (incl. Tracing, Replay) 84.64 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 85.87 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 90.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 91.55 KB
CDN Bundle - uncompressed 88.83 KB
CDN Bundle (incl. Tracing) - uncompressed 144.49 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 93.43 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 148.38 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 215.46 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 261.12 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.75.3

  • fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)
  • chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
  • chore(v10/publish): Tag all packages as v10 (#24619)

10.75.2

  • fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)
  • fix(v10/core): Apply dataCollection.urlQueryParams to collected URLs and query strings (#24572)
  • fix(v10/nextjs): Align tunnel request matching in middleware with tunnel rewrite (#24565)
  • fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams (#24563)

10.75.1

  • fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)
  • fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)
  • fix(v10/hono): Allow @​cloudflare/workers-types v5 as peer dependency (#24500)
  • fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)
Commits
  • 3b282c1 release: 10.75.3
  • b5ea330 meta(changelog): Update changelog for 10.75.3 (#24649)
  • 533a6fa chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
  • 4e91ce5 chore(v10/publish): Tag all packages as v10 (#24619)
  • f01ca30 fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel ...
  • 79e6e95 Merge remote-tracking branch 'remotes/origin/release/10.75.2' into v10
  • faeac9a release: 10.75.2
  • 7175b19 meta(changelog): Update changelog for 10.75.2 (#24585)
  • 8f5dc60 fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)
  • 44506df fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams...
  • Additional commits viewable in compare view

Updates google-auth-library from 11.0.2 to 11.1.0

Changelog

Sourced from google-auth-library's changelog.

11.1.0 (2026-09-15)

Features

Commits

Updates mongoose from 9.10.1 to 9.10.3

Release notes

Sourced from mongoose's releases.

9.10.3 / 2026-09-29

  • fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
  • fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
  • fix(schema): run setters declared on the union path itself #16528 giaBaoJS
  • fix(collection): open collection if connection was already opened #16527 #16525 #16524
  • fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

Changelog

Sourced from mongoose's changelog.

9.10.3 / 2026-09-29

  • fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
  • fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
  • fix(schema): run setters declared on the union path itself #16528 giaBaoJS
  • fix(collection): open collection if connection was already opened #16527 #16525 #16524
  • fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

Commits
  • d5841fe chore: release 9.10.3
  • 6779047 Merge pull request #16537 from Automattic/vkarpov15/gh-16529
  • 5ed18f4 Merge pull request #16533 from IbrahimHafez1/fix/ordered-bulk-save-state
  • 780de3f refactor(model): track bulkSave document indexes
  • 04a985a refactor(model): separate ordered and unordered bulkSave results
  • 519f399 fix(query+model): replace {MODEL} in cast error messages from update and bulk...
  • 4093445 Merge pull request #16528 from giaBaoJS/fix/union-path-setters
  • dd91af4 Merge pull request #16527 from Automattic/vkarpov15/gh-16524
  • 3d905bb fix(model): preserve unsaved documents after ordered bulkSave errors
  • 5d3bafd fix(schema): run setters declared on the union path itself
  • Additional commits viewable in compare view

Updates supertest from 7.2.2 to 7.3.0

Release notes

Sourced from supertest's releases.

v7.3.0

  • fix: stabilize ephemeral server requests and assertions 71dc5fb
  • Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd8535d99 3b5ba5c
  • Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2.3.2 c3419b2
  • Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1 7e409db
  • Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expansion-1.1.21 b55a7f9
  • Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslist-4.29.0 7a5deaa
  • Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8 a75f6ee
  • Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2 c2cb33e
  • Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind 7fb34e7
  • chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 c357584
  • chore(deps-dev): bump browserslist from 4.25.1 to 4.29.0 2a01b57
  • chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.8 343394d
  • chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21 6b203e9
  • Merge pull request #881 from forwardemail/dependabot/npm_and_yarn/qs-6.14.2 d40ca7e
  • fix: match ephemeral server address family b6f5995
  • chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 81766ca
  • chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 985ac7c
  • chore(deps): bump minimatch 58baa5f
  • chore(deps): bump qs from 6.14.1 to 6.14.2 c406e82

https://github.com/ladjs/supertest/compare/v7.2.2...v7.3.0

Commits
  • a3f5cb8 7.3.0
  • 71dc5fb fix: stabilize ephemeral server requests and assertions
  • 3b5ba5c Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd85...
  • c3419b2 Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2...
  • 7e409db Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1
  • b55a7f9 Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expan...
  • 7a5deaa Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslis...
  • a75f6ee Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8
  • c2cb33e Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2
  • 7fb34e7 Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
supertest
Ecosystem:
npm
Version Change:
7.2.2 → 7.3.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
11.0.2 → 11.1.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
10.74.0 → 10.75.3
Update Type:
Minor
Package:
mongoose
Ecosystem:
npm
Version Change:
9.10.1 → 9.10.3
Update Type:
Patch
Technical Details
ID: 16659093
UUID: 5687804762
Node ID: PR_kwDOQfvpgc8AAAABGaLriQ
Host: GitHub
Repository: rajatmittal-359/shopmaster-pro