Update Backend dependencies by ggrossetie · Pull Request #1860 · EcrituresNumeriques/stylo

ggrossetie · 2026-01-05T09:53:26Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
@sentry/node (source)	dependencies	minor	`~10.38` → `~10.51.0`
@sentry/profiling-node (source)	dependencies	minor	`~10.38` → `~10.51.0`
dompurify	dependencies	minor	`~3.3` → `~3.4.0`
node (source)	volta	minor	`24.13.0` → `24.15.0`
npm (source)	volta	minor	`11.9.0` → `11.13.0`
ws	dependencies	minor	`~8.19` → `~8.20.0`

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v10.51.0`

Compare Source

Important Changes

feat(cloudflare): Add trace propagation for RPC method calls (#20343)

Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects.
This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

// Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);

// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  MyDurableObjectBase,
);

feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options.
Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:
```
// instrument.mjs (or instrument.ts)
import * as Sentry from '@&#8203;sentry/hono/node';

Sentry.init({
  dsn: '__DSN__',
  tracesSampleRate: 1.0,
});
```
feat(nitro): Add @sentry/nitro SDK (#19224)

A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig.
Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

deps(minimatch): Upgrade patch version to use new brace-expansion peer-dep (#20198)
docs: Add deprecation notices to bin scripts (#20570)
feat(astro): Drop prerendered http.server filter via ignoreSpans (#20513)
feat(aws-serverless): Validate extension tunnel DSN against SENTRY_DSN (#20528)
feat(browser): Add ingest_settings to span v2 envelope payload (#20411)
feat(browser): Add support for streamed spans in httpContextIntegration (#20464)
feat(core): Backfill otel attributes on streamed spans (#20439)
feat(core): clear up integrations on dispose (#20407)
feat(core): Instrument langgraph createReactAgent (#20344)
feat(core): Support attribute matching in ignoreSpans (#20512)
feat(feedback): allow error messages to be customized (#20474)
feat(hono): Support middleware spans defined in app groups (#20465)
feat(nextjs): Filter unwanted segments when span streaming is enabled (#20384)
feat(nextjs): Migrate edge event processors to span-first APIs (#20551)
feat(nextjs): Migrate server event processors to span-first APIs (#20527)
feat(nextjs): Set global attribute for turbopack usage (#20558)
feat(nitro): Nitro SDK (#19224)
feat(react-router): Clean up bogus * http.route attribute on segment spans (#20471)
feat(react-router): Drop low-quality transactions via ignoreSpans (#20514)
feat(sveltekit): Support span streaming in svelteKitSpansEnhancement integration (#20496)
feat(tanstackstart-react): Add dynamic tunnel route helper and generator (#20264)
fix: update prisma v7 spans descriptions (#20456)
fix(core): Avoid parse-time SyntaxError on Safari <16.4 in postgresjs (#20498)
fix(core): Ensure isSentryRequest handles subdomains properly (#20530)
fix(core): Ensure ip address headers are stripped when lower case (#20484)
fix(core): Filter more cookie names for PII (#20485)
fix(core): Use symbol for normalization checks (#20486)
fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers (#20554)
fix(nextjs): Ensure we do not match tunnel endpoints too broadly (#20488)
fix(opentelemetry): Add conditional browser export to avoid node deps (#20556)
fix(replay): Avoid main-thread blocking in WorkerHandler under event bursts (#20548)
fix(replay): Ensure maskAttributes works with maskAllText=false (#20491)
fix(supabase): Consider sendDefaultPii for supabase integration (#20490)

Internal Changes

chore: Add size limit reports on PRs for Cloudflare (#20055)
chore: Update CODEOWNERS (#20559)
chore(build): Opt-out of nx analytics (#20487)
chore(ci): Automatically bump size limit every week (#20531)
chore(ci): Bump pnpm/action-setup to v5 and pin to commit SHA (#20462)
chore(ci): Do not report flaky test issues if we cannot find a test name (#20589)
chore(ci): Streamline CI setup to split bundle, layer, tarball generation (#20396)
chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency (#20463)
chore(e2e): Add vue and vue-router to nuxt-4 canary build step to fix rollup resolution (#20519)
chore(e2e): Remove @tanstack/start-plugin-core override (#20518)
chore(size-limit): weekly auto-bump (#20572)
chore(skill): Add skill for writing unit and E2E tests (#20561)
chore(test): Reduce unneeded idleTimeout test config (#20467)
ci(size-bump): Fix path in size-limit auto-bump workflow (#20566)
fix(e2e/tanstackstart-react): pin @tanstack/start-plugin-core to unblock CI (#20482)
fix(tests): Remove nitro canary test job (#20473)
ref(browser): Use safeSetSpanJSONAttributes in cultureContext integration (#20481)
test(browser): Unflake some more tests (#20591)
test(nextjs): Pin eslint-config-next package to major (#20552)
test(node): Fix flaky ANR test (#20592)
test(node): Fix flaky worker thread integration test (#20588)
test(node): Unflake postgres tests (#20593)
test(node): Update timeout for cron integration tests (#20586)
test(supabase): Stop supabase before initializing (#20563)
test(tanstack): Prefix test labels (#20569)

`v10.50.0`

Compare Source

Important Changes

feat(effect): Support v4 beta (#20394)

The @sentry/effect integration now supports Effect v4 beta, enabling Sentry instrumentation for the latest Effect framework version.
Read more in the Effect SDK readme.
feat(hono): Add @sentry/hono/bun for Bun runtime (#20355)

A new @sentry/hono/bun entry point adds first-class support for running Hono applications instrumented with Sentry on the Bun runtime.
Read more in the Hono SDK readme.
feat(replay): Add replayStart/replayEnd client lifecycle hooks (#20369)

New replayStart and replayEnd client lifecycle hooks let you react to replay session start and end events in your application.

Other Changes

feat(core): Emit no_parent_span client outcomes for discarded spans requiring a parent (#20350)
feat(deps): Bump protobufjs from 7.5.4 to 7.5.5 (#20372)
feat(hono): Add runtime packages as optional peer dependencies (#20423)
feat(opentelemetry): Add tracingChannel utility for context propagation (#20358)
fix(browser): Enrich graphqlClient spans for relative URLs (#20370)
fix(browser): Filter implausible LCP values (#20338)
fix(cloudflare): Use TransformStream to keep track of streams (#20452)
fix(console): Re-patch console in AWS Lambda runtimes (#20337)
fix(core): Correct GoogleGenAIIstrumentedMethod typo in type name
fix(core): Handle stateless MCP wrapper transport correlation (#20293)
fix(hono): Remove undefined from options type (#20419)
fix(node): Guard against null httpVersion in outgoing request span attributes (#20430)
fix(node-core): Pass rejection reason instead of Promise as originalException (#20366)

Internal Changes

chore: Ignore claude worktrees (#20440)
chore: Prevent test from creating zombie process (#20392)
chore: Update size-limit (#20412)
chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#20458)
chore(e2e-tests): Use tarball symlinks for E2E tests instead of verdaccio (#20386)
chore(lint): Remove lint warnings (#20413)
chore(test): Remove empty variant tests (#20443)
chore(tests): Use verdaccio as node process instead of docker image (#20336)
docs(readme): Update usage instructions for binary scripts (#20426)
ref(node): Vendor undici instrumentation (#20190)
test(aws-serverless): Ensure aws-serverless E2E tests run locally (#20441)
test(aws-serverless): Split npm & layer tests (#20442)
test(browser): Fix flaky sessions route-lifecycle test + upgrade axios (#20197)
test(cloudflare): Use .makeRequestAndWaitForEnvelope to wait for envelopes (#20208)
test(effect): Rename effect e2e tests to a versioned folder (#20390)
test(hono): Add E2E test for Hono on Cloudflare, Node and Bun (#20406)
test(hono): Add E2E tests for middleware spans (#20451)
test(nextjs): Unskip blocked cf tests (#20356)
test(node): Refactor integration tests for honoIntegration (#20397)
test(node): Use docker-compose healthchecks for service readiness (#20429)
test(node-core): Fix minute-boundary race in session-aggregate tests (#20437)
test(nuxt): Fix flaky database error test (#20447)

`v10.49.0`

Compare Source

Important Changes

feat(browser): Add View Hierarchy integration (#14981)

A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:
```
import * as Sentry from '@&#8203;sentry/browser';

Sentry.init({
  dsn: '__DSN__',
  integrations: [Sentry.viewHierarchyIntegration()],
});
```
feat(cloudflare): Split alarms into multiple traces and link them (#19373)

Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.
feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.
feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.
feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

feat(core): Export a reusable function to add tracing headers (#20076)
feat(core): Expose rewriteSources top level option (#20142)
feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
feat(node): Include global scope for eventLoopBlockIntegration (#20108)
fix(core, node): Support loading Express options lazily (#20211)
fix(core): Set conversation_id only on gen_ai spans (#20274)
fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
fix(replay): Use live click attributes in breadcrumbs (#20262)

Internal Changes

chore: Add PR review reminder workflow (#20175)
chore: Fix lint warnings (#20250)
chore(bugbot): Add rules to flag test-flake-provoking patterns (#20192)
chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
chore(ci): Bump dorny/paths-filter from v3.0.1 to v4.0.1 (#20251)
chore(ci): Remove codecov steps from jobs that produce no coverage/JUnit data (#20244)
chore(ci): Remove craft changelog preview (#20271)
chore(ci): Remove node-overhead GitHub Action (#20246)
chore(ci): Replace pr-labels-action with native GitHub expressions (#20252)
chore(ci): Skip flaky issue creation for optional tests (#20288)
chore(deps-dev): Bump @sveltejs/kit from 2.53.3 to 2.57.1 (#20216)
chore(deps-dev): Bump vite from 7.2.0 to 7.3.2 in /dev-packages/e2e-tests/test-applications/tanstackstart-react (#20107)
chore(deps): Bump axios from 1.13.5 to 1.15.0 (#20180)
chore(deps): Bump axios from 1.13.5 to 1.15.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#20179)
chore(deps): Bump hono from 4.12.7 to 4.12.12 (#20118)
chore(deps): Bump hono from 4.12.7 to 4.12.12 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#20119)
chore(deps): Bump next from 16.1.7 to 16.2.3 in nextjs-16-cf-workers (#20289)
chore(size-limit): Bump failing size limit scenario (#20186)
ci: Add automatic flaky test detector (#18684)
ci: Extract test names for flaky test issues (#20298)
ci: Remove Docker container for Verdaccio package publishing (#20329)
fix(ci): Prevent command injection in ci-metadata workflow (#19899)
fix(e2e-tests): Remove flaky navigation breadcrumb assertions from parameterized-routes tests (#20202)
fix(e2e): Add op check to waitForTransaction in React Router e2e tests (#20193)
fix(node-integration-tests): Fix flaky kafkajs test race condition (#20189)
ref(core): Add registry in Vercel ai integration (#20098)
ref(core): Automatically disable truncation when span streaming is enabled in Anthropic AI integration (#20228)
ref(core): Automatically disable truncation when span streaming is enabled in Google GenAI integration (#20229)
ref(core): Automatically disable truncation when span streaming is enabled in LangChain integration (#20230)
ref(core): Automatically disable truncation when span streaming is enabled in LangGraph integration (#20231)
ref(core): Automatically disable truncation when span streaming is enabled in OpenAI integration (#20227)
ref(core): Automatically disable truncation when span streaming is enabled in Vercel AI integration (#20232)
ref(core): Merge embeddings operations constants (#20095)
ref(core): Remove unused constants from vercel-ai-attributes.ts (#20096)
ref(nextjs): Refactor findInjectionIndexAfterDirectives for better readability (#20310)
ref(opentelemetry): Replace @opentelemetry/resources with inline getSentryResource() (#20327)
test: Fix flaky ANR test by increasing blocking duration (#20239)
test(bun): Add bun integration test folder (#20286)
test(cloudflare): Skip flaky durableobject-spans test (#20282)
test(openai): Use multi-message scenario in no-truncation test (#20194)
test(react): Remove duplicated test mock (#20200)
tests(ai): Fix streaming+truncation integration tests across AI integrations (#20326)

`v10.48.0`

Compare Source

Important Changes

feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas (#20133)

The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the tunnel option:

RUN mkdir -p /opt/sentry-extension
COPY node_modules/@&#8203;sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
COPY node_modules/@&#8203;sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs

Sentry.init({
  dsn: '__DSN__',
  tunnel: 'http://localhost:9000/envelope',
});

This works with any Sentry SDK (@sentry/aws-serverless, @sentry/sveltekit, @sentry/node, etc.).

feat(cloudflare): Support basic WorkerEntrypoint (#19884)

withSentry now supports instrumenting classes extending Cloudflare's WorkerEntrypoint. This instruments fetch, scheduled, queue, and tail handlers.

import * as Sentry from '@&#8203;sentry/cloudflare';
import { WorkerEntrypoint } from 'cloudflare:workers';

class MyWorker extends WorkerEntrypoint {
  async fetch(request: Request): Promise<Response> {
    return new Response('Hello World!');
  }
}

export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);

ref(core): Unify .do* span ops to gen_ai.generate_content (#20074)

All Vercel AI do* spans (ai.generateText.doGenerate, ai.streamText.doStream, ai.generateObject.doGenerate, ai.streamObject.doStream) now use a single unified span op gen_ai.generate_content instead of separate ops like gen_ai.generate_text, gen_ai.stream_text, gen_ai.generate_object, and gen_ai.stream_object.

ref(core): Remove provider-specific AI span attributes in favor of gen_ai attributes in sentry conventions (#20011)

The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized gen_ai.* equivalents instead:

Removed attribute	Replacement
`openai.response.id`	`gen_ai.response.id`
`openai.response.model`	`gen_ai.response.model`
`openai.usage.prompt_tokens`	`gen_ai.usage.input_tokens`
`openai.usage.completion_tokens`	`gen_ai.usage.output_tokens`
`openai.response.timestamp`	(removed, no replacement)
`anthropic.response.timestamp`	(removed, no replacement)

If you reference these attributes in hooks (e.g. beforeSendTransaction), update them to the gen_ai.* equivalents.

feat(core): Support embeddings in LangChain (#20017)

Adds instrumentation for LangChain embeddings (embedQuery, embedDocuments), creating gen_ai.embeddings spans. In Node.js, embedding classes from @langchain/openai, @langchain/google-genai, @langchain/mistralai, and @langchain/google-vertexai are auto-instrumented. For other runtimes, use the new instrumentLangChainEmbeddings API:
```
import * as Sentry from '@&#8203;sentry/cloudflare';
import { OpenAIEmbeddings } from '@&#8203;langchain/openai';

const embeddings = Sentry.instrumentLangChainEmbeddings(new OpenAIEmbeddings({ model: 'text-embedding-3-small' }));

await embeddings.embedQuery('Hello world');
```

Other Changes

feat(core): Support registerTool/registerResource/registerPrompt in MCP integration (#20071)
feat(core, node): Portable Express integration (#19928)
feat(deno): Add denoRuntimeMetricsIntegration (#20023)
feat(deps): Bump bundler plugins to 5.2.0 (#20122)
feat(deps): bump @hapi/content from 6.0.0 to 6.0.1 (#20102)
feat(node, bun): Enforce minimum collection interval in runtime metrics integrations (#20068)
feat(nuxt): Exclude tracing meta tags on cached pages in Nuxt 5 (#20168)
feat(react-router): Export sentryOnError (#20120)
fix(aws-serverless): Add timeout to _endSpan forceFlush to prevent Lambda hanging (#20064)
fix(cloudflare): Ensure every request instruments functions (#20044)
fix(core): Only attach flags context to error events (#20116)
fix(core): Replace regex with string check in stack parser to prevent main thread blocking (#20089)
fix(core): set span.status to error when MCP tool returns JSON-RPC error response (#20082)
fix(gatsby): Fix errorHandler signature to match bundler-plugin-core API (#20048)
ref(core): Do not emit spans for chats.create in google-genai (#19990)

Internal Changes

chore: Remove unused tsconfig-template folder (#20067)
chore: Update validate-pr workflow (#20072)
chore(deps-dev): Bump effect from 3.20.0 to 3.21.0 (#19999)
chore(deps): Bump @xmldom/xmldom from 0.8.3 to 0.8.12 (#20066)
chore(deps): Bump lodash.template from 4.5.0 to 4.18.1 (#20085)
chore(oxlint): Add typeawareness into oxlintrc (#20075)
ci(deps): Bump getsentry/craft/.github/workflows/changelog-preview.yml from 2.24.1 to 2.25.2 (#20081)
ci(deps): Bump mshick/add-pr-comment (#20078)
ref(core): Extract shared endStreamSpan for AI integrations (#20021)
ref(core): Simplify addResponseAttributes in openai integration (#20013)
test(angular): Bump TypeScript to ~6.0.0 in angular-21 E2E test app (#20134)
test(nuxt): Make Nuxt 5 (nightly) E2E optional (#20113)
tests(node): Add node integration tests for Vercel ToolLoopAgent (#20087)

`v10.47.0`

Compare Source

Important Changes

feat(node-core): Add OTLP integration for node-core/light (#19729)

Added otlpIntegration at @sentry/node-core/light/otlp for users who manage
their own OpenTelemetry setup and want to send trace data to Sentry without
adopting the full @sentry/node SDK.

import { NodeTracerProvider } from '@&#8203;opentelemetry/sdk-trace-node';
import * as Sentry from '@&#8203;sentry/node-core/light';
import { otlpIntegration } from '@&#8203;sentry/node-core/light/otlp';

const provider = new NodeTracerProvider();
provider.register();

Sentry.init({
  dsn: '__DSN__',
  integrations: [
    otlpIntegration({
      // Export OTel spans to Sentry via OTLP (default: true)
      setupOtlpTracesExporter: true,
    }),
  ],
});

The integration links Sentry errors to OTel traces and exports spans to Sentry via OTLP.

feat(node, bun): Add runtime metrics integrations for Node.js and Bun (#19923, #19979)

New nodeRuntimeMetricsIntegration and bunRuntimeMetricsIntegration automatically collect runtime health metrics and send them to Sentry on a configurable interval (default: 30s). Collected metrics include memory (RSS, heap used/total), CPU utilization, event loop utilization, and process uptime. Node additionally collects event loop delay percentiles (p50, p99). Extra metrics like CPU time and external memory are available as opt-in.
```
// Node.js
import * as Sentry from '@&#8203;sentry/node';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeRuntimeMetricsIntegration()],
});

// Bun
import * as Sentry from '@&#8203;sentry/bun';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.bunRuntimeMetricsIntegration()],
});
```
feat(core): Support embedding APIs in google-genai (#19797)

Adds instrumentation for the Google GenAI embedContent API, creating gen_ai.embeddings spans.
feat(browser): Add elementTimingIntegration for tracking element render and load times (#19869)

The new elementTimingIntegration captures Element Timing API data as Sentry metrics. It emits element_timing.render_time and element_timing.load_time distribution metrics for elements annotated with the elementtiming HTML attribute.
```
import * as Sentry from '@&#8203;sentry/browser';

Sentry.init({
  dsn: '__DSN__',
  integrations: [Sentry.browserTracingIntegration(), Sentry.elementTimingIntegration()],
});
```
```
<img src="hero.jpg" elementtiming="hero-image" />
```

Other Changes

feat(nuxt): Add middleware instrumentation compatibility for Nuxt 5 (#19968)
feat(nuxt): Support parametrized SSR routes in Nuxt 5 (#19977)
feat(solid): Add route parametrization for Solid Router (#20031)
fix(core): Guard nullish response in supabase PostgREST handler (#20033)
fix(node): Deduplicate sentry-trace and baggage headers on outgoing requests (#19960)
fix(node): Ensure startNewTrace propagates traceId in OTel environments (#19963)
fix(nuxt): Use virtual module for Nuxt pages data (SSR route parametrization) (#20020)
fix(opentelemetry): Convert seconds timestamps in span.end() to milliseconds (#19958)
fix(profiling): Disable profiling in worker threads (#20040)
fix(react-router): Disable debug ID injection in Vite plugin to prevent double injection (#19890)
refactor(browser): Reduce browser package bundle size (#19856)
feat(deps): Bump OpenTelemetry dependencies (#20046)

Internal Changes

chore: Add shared validate-pr composite action (#20025)
chore: Update validate-pr action to latest version (#20027)
chore(deps): Bump @apollo/server from 5.4.0 to 5.5.0 (#20007)
chore(deps): Bump amqplib from 0.10.7 to 0.10.9 (#20000)
chore(deps): Bump srvx from 0.11.12 to 0.11.13 (#20001)
chore(deps-dev): Bump node-forge from 1.3.2 to 1.4.0 (#20012)
chore(deps-dev): Bump yaml from 2.8.2 to 2.8.3 (#19985)
ci(deps): Bump actions/upload-artifact from 6 to 7 (#19569)
docs(release): Update publishing-a-release.md (#19982)
feat(deps): Bump babel-loader from 10.0.0 to 10.1.1 (#19997)
feat(deps): Bump handlebars from 4.7.7 to 4.7.9 (#20008)
fix(browser-tests): Pin axios to 1.13.5 to avoid compromised 1.14.1 (#20047)
fix(ci): Update validate-pr action to remove draft enforcement (#20035)
fix(ci): Update validate-pr action to remove draft enforcement (#20037)
fix(e2e): Pin @opentelemetry/api to 1.9.0 in ts3.8 test app (#19992)
ref(browser-tests): Add waitForMetricRequest helper (#20002)
ref(core): Consolidate getOperationName into one shared utility (#19971)
ref(core): Introduce instrumented method registry for AI integrations (#19981)
test(deno): Expand Deno E2E test coverage (#19957)
test(e2e): Add e2e tests for nodeRuntimeMetricsIntegration (#19989)

`v10.46.0`

Compare Source

Important Changes

feat(elysia): @sentry/elysia - Alpha Release (#19509)

New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

Note: This is an alpha release. Please report any issues or feedback on GitHub.

Features
- Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
- Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
- Distributed tracing — sentry-trace and baggage headers propagated automatically on incoming/outgoing requests.
Usage
```
import * as Sentry from '@&#8203;sentry/elysia';
import { Elysia } from 'elysia';

Sentry.init({ dsn: '__DSN__', tracesSampleRate: 1.0 });

const app = Sentry.withElysia(new Elysia());
app.get('/', () => 'Hello World');
app.listen(3000);
```

Other Changes

feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
fix(cloudflare): Forward ctx argument to Workflow.do user callback (#19891)
fix(cloudflare): Send correct events in local development (#19900)
fix(core): Do not overwrite user provided conversation id in Vercel (#19903)
fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
fix(core): Send internal_error as span status for Vercel error spans (#19921)
fix(core): Truncate content array format in Vercel (#19911)
fix(deps): bump fast-xml-parser to 5.5.8 in @azure/core-xml chain (#19918)
fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#19880)
fix(nestjs): Add node to nest metadata (#19875)
fix(serverless): Add node to metadata (#19878)

Internal Changes

chore(ci): Fix "Gatbsy" typo in issue package label workflow (#19905)
chore(claude): Enable Claude Code Intelligence (LSP) (#19930)
chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#19888)
chore(deps-dev): bump @react-router/node from 7.13.0 to 7.13.1 (#19544)
chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#19926)
chore(deps-dev): bump qunit-dom from 3.2.1 to 3.5.0 (#19546)
chore(node-integration-tests): Remove unnecessary file-type dependency (#19824)
chore(remix): Replace glob with native recursive fs walk (#19531)
feat(deps): bump stacktrace-parser from 0.1.10 to 0.1.11 (#19887)
fix(craft): Add missing mainDocsUrl for @sentry/effect SDK (#19860)
fix(deps): bump next to 15.5.14 in nextjs-15 and nextjs-15-intl E2E test apps (#19917)
fix(deps): update lockfile to resolve h3@1.15.10 (#19933)
ref(core): Remove duplicate buildMethodPath utility from openai (#19969)
ref(elysia): Drop @elysiajs/opentelemetry dependency (#19947)
ref(nuxt): Extract core logic for storage/database to prepare for Nuxt v5 (#19920)
ref(nuxt): Extract handler patching to extra plugin for Nitro v2/v3 (#19915)
ref(sveltekit): Replace recast + @babel/parser with acorn (#19533)
test(astro): Re-enable server island tracing e2e test in Astro 6 (#19872)
test(cloudflare): Enable multi-worker tests for CF integration tests (#19938)

Work in this release was contributed by @roli-lpci. Thank you for your contributions!

Important Changes

feat(node): Add nodeRuntimeMetricsIntegration for automatic Node.js runtime metrics (#19923)

The new nodeRuntimeMetricsIntegration automatically collects Node.js runtime health metrics and sends them to Sentry. Eight metrics are emitted by default every 30 seconds: memory (RSS, heap used/total), CPU utilization, event loop delay (p50, p99), event loop utilization, and process uptime. Additional metrics are available as opt-in.
```
import * as Sentry from '@&#8203;sentry/node';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeRuntimeMetricsIntegration()],
});
```

`v10.45.0`

Compare Source

Important Changes

feat(remix): Server Timing Headers Trace Propagation (#18653)

The Remix SDK now supports automatic trace propagation via Server-Timing response headers to continue pageload traces on the client side.
This means, you no longer have to define a custom meta function to add Sentry <meta> tags to your page as previously.
We'll update out Remix tracing docs after this release.

Other Changes

fix(cloudflare): Use correct env types for withSentry (#19836)
fix(core): Align error span status message with core SpanStatusType for langchain/google-genai (#19863)
fix(deno): Clear pre-existing OTel global before registering TracerProvider (#19723)
fix(nextjs): Skip tracing for tunnel requests (#19861)
fix(node-core): Recycle propagationContext for each request (#19835)
ref(core): Simplify core utility functions for smaller bundle (#19854)

Internal Changes

chore(deps): bump next from 16.1.5 to 16.1.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#19851)
ci(release): Switch from action-prepare-release to Craft (#18763)
fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 (#19849)
fix(deps): bump file-type to 21.3.2 and @nestjs/common to 11.1.17 (#19847)
fix(deps): bump flatted 3.3.1 to 3.4.2 to fix CVE-2026-32141 (#19842)
fix(deps): bump hono 4.12.5 to 4.12.7 in cloudflare-hono E2E test app (#19850)
fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 and related (#19870)
fix(deps): bump tar 7.5.10 to 7.5.11 to fix CVE-2026-31802 ([#

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

netlify · 2026-01-05T12:21:28Z

✅ Deploy Preview for stylo-docs canceled.

Name	Link
🔨 Latest commit	`c900328`
🔍 Latest deploy log	https://app.netlify.com/projects/stylo-docs/deploys/69f2c9872bd71a0008cad14c

ggrossetie force-pushed the renovate/backend-dependencies branch from 6d831a7 to cb9d90d Compare January 5, 2026 10:13

ggrossetie changed the title ~~chore(deps): lock file maintenance~~ chore(deps): lock file maintenance backend dependencies Jan 14, 2026

ggrossetie force-pushed the renovate/backend-dependencies branch from cb9d90d to 7ccec99 Compare January 14, 2026 03:00

ggrossetie force-pushed the renovate/backend-dependencies branch from 7ccec99 to 5a8e227 Compare February 5, 2026 15:34

ggrossetie changed the title ~~chore(deps): lock file maintenance backend dependencies~~ chore(deps): lock file maintenance Feb 6, 2026

ggrossetie force-pushed the renovate/backend-dependencies branch 2 times, most recently from 640dfbf to c0c81ad Compare February 6, 2026 09:19

ggrossetie changed the title ~~chore(deps): lock file maintenance~~ chore(deps): lock file maintenance backend dependencies Feb 11, 2026

ggrossetie force-pushed the renovate/backend-dependencies branch 3 times, most recently from dd5f36b to bf01444 Compare February 17, 2026 03:12

ggrossetie force-pushed the renovate/backend-dependencies branch 3 times, most recently from cfc6f06 to fe784e5 Compare February 26, 2026 03:09

ggrossetie force-pushed the renovate/backend-dependencies branch from fe784e5 to dbfedf7 Compare March 3, 2026 03:12

ggrossetie changed the title ~~chore(deps): lock file maintenance backend dependencies~~ chore(deps): update backend dependencies Mar 3, 2026

ggrossetie force-pushed the renovate/backend-dependencies branch from dbfedf7 to 464a72c Compare March 4, 2026 03:05

ggrossetie force-pushed the renovate/backend-dependencies branch 2 times, most recently from ebbec0f to 2fee839 Compare March 12, 2026 03:09

ggrossetie force-pushed the renovate/backend-dependencies branch 5 times, most recently from 30323d6 to 11c839d Compare March 25, 2026 03:12

ggrossetie force-pushed the renovate/backend-dependencies branch 3 times, most recently from 41a60fc to cd2c379 Compare April 1, 2026 03:15

ggrossetie changed the title ~~chore(deps): update backend dependencies~~ Update Backend dependencies Apr 3, 2026

ggrossetie force-pushed the renovate/backend-dependencies branch from cd2c379 to 4c71328 Compare April 10, 2026 03:14

ggrossetie force-pushed the renovate/backend-dependencies branch 2 times, most recently from 58365e4 to 4670237 Compare April 17, 2026 03:14

ggrossetie force-pushed the renovate/backend-dependencies branch 2 times, most recently from 0fcb260 to cdffb01 Compare April 24, 2026 03:16

Update Backend dependencies

c900328

ggrossetie force-pushed the renovate/backend-dependencies branch from cdffb01 to c900328 Compare April 30, 2026 03:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Backend dependencies#1860

Update Backend dependencies#1860
ggrossetie wants to merge 1 commit intomasterfrom
renovate/backend-dependencies

ggrossetie commented Jan 5, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jan 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

ggrossetie commented Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.51.0

Important Changes

Other Changes

v10.50.0

Important Changes

Other Changes

v10.49.0

Important Changes

Other Changes

v10.48.0

Important Changes

Other Changes

v10.47.0

Important Changes

Other Changes

v10.46.0

Important Changes

Other Changes

Important Changes

v10.45.0

Important Changes

Other Changes

Configuration

Uh oh!

netlify Bot commented Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for stylo-docs canceled.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

ggrossetie commented Jan 5, 2026 •

edited

Loading

`v10.51.0`

`v10.50.0`

`v10.49.0`

`v10.48.0`

`v10.47.0`

`v10.46.0`

`v10.45.0`

netlify Bot commented Jan 5, 2026 •

edited

Loading