chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@sentry/react (source)	8.39.0 -> 8.41.0					dependencies	minor
@vitejs/plugin-react-swc	3.7.1 -> 3.7.2					devDependencies	patch
dargmuesli/github-actions	2.3.5 -> 2.3.7					action	patch
nginx	1.27.2-alpine -> 1.27.3-alpine					final	patch
typescript (source)	5.6.3 -> 5.7.2					devDependencies	minor
typescript-eslint (source)	8.15.0 -> 8.16.0					devDependencies	minor

---

Release Notes

getsentry/sentry-javascript (@​sentry/react)

v8.41.0

Compare Source

Important Changes

• meta(nuxt): Require minimum Nuxt v3.7.0 (#​14473)

  We formalized that the Nuxt SDK is at minimum compatible with Nuxt version 3.7.0 and above.
  Additionally, the SDK requires the implicit nitropack dependency to satisfy version ^2.10.0 and ofetch to satisfy ^1.4.0.
  It is recommended to check your lock-files and manually upgrade these dependencies if they don't match the version ranges.

Deprecations

We are deprecating a few APIs which will be removed in the next major.

The following deprecations will potentially affect you:

• feat(core): Update & deprecate undefined option handling (#​14450)

  In the next major version we will change how passing undefined to tracesSampleRate / tracesSampler / enableTracing will behave.

  Currently, doing the following:

  Sentry.init({
    tracesSampleRate: undefined,
  });

  Will result in tracing being enabled (although no spans will be generated) because the tracesSampleRate key is present in the options object.
  In the next major version, this behavior will be changed so that passing undefined (or rather having a tracesSampleRate key) will result in tracing being disabled, the same as not passing the option at all.
  If you are currently relying on undefined being passed, and and thus have tracing enabled, it is recommended to update your config to set e.g. tracesSampleRate: 0 instead, which will also enable tracing in v9.

  The same applies to tracesSampler and enableTracing.

• feat(core): Log warnings when returning null in beforeSendSpan (#​14433)

  Currently, the beforeSendSpan option in Sentry.init() allows you to drop individual spans from a trace by returning null from the hook.
  Since this API lends itself to creating "gaps" inside traces, we decided to change how this API will work in the next major version.

  With the next major version the beforeSendSpan API can only be used to mutate spans, but no longer to drop them.
  With this release the SDK will warn you if you are using this API to drop spans.
  Instead, it is recommended to configure instrumentation (i.e. integrations) directly to control what spans are created.

  Additionally, with the next major version, root spans will also be passed to beforeSendSpan.

• feat(utils): Deprecate @sentry/utils (#​14431)

  With the next major version the @sentry/utils package will be merged into the @sentry/core package.
  It is therefore no longer recommended to use the @sentry/utils package.

• feat(vue): Deprecate configuring Vue tracing options anywhere else other than through the vueIntegration's tracingOptions option (#​14385)

  Currently it is possible to configure tracing options in various places in the Sentry Vue SDK:

  • In Sentry.init()
  • Inside tracingOptions in Sentry.init()
  • In the vueIntegration() options
  • Inside tracingOptions in the vueIntegration() options

  Because this is a bit messy and confusing to document, the only recommended way to configure tracing options going forward is through the tracingOptions in the vueIntegration().
  The other means of configuration will be removed in the next major version of the SDK.

• feat: Deprecate registerEsmLoaderHooks.include and registerEsmLoaderHooks.exclude (#​14486)

  Currently it is possible to define registerEsmLoaderHooks.include and registerEsmLoaderHooks.exclude options in Sentry.init() to only apply ESM loader hooks to a subset of modules.
  This API served as an escape hatch in case certain modules are incompatible with ESM loader hooks.

  Since this API was introduced, a way was found to only wrap modules that there exists instrumentation for (meaning a vetted list).
  To only wrap modules that have instrumentation, it is recommended to instead set registerEsmLoaderHooks.onlyIncludeInstrumentedModules to true.

  Note that onlyIncludeInstrumentedModules: true will become the default behavior in the next major version and the registerEsmLoaderHooks will no longer accept fine-grained options.

The following deprecations will most likely not affect you unless you are building an SDK yourself:

• feat(core): Deprecate arrayify (#​14405)
• feat(core): Deprecate flatten (#​14454)
• feat(core): Deprecate urlEncode (#​14406)
• feat(core): Deprecate validSeverityLevels (#​14407)
• feat(core/utils): Deprecate getNumberOfUrlSegments (#​14458)
• feat(utils): Deprecate memoBuilder, BAGGAGE_HEADER_NAME, and makeFifoCache (#​14434)
• feat(utils/core): Deprecate addRequestDataToEvent and extractRequestData (#​14430)

Other Changes

• feat: Streamline sentry-trace, baggage and DSC handling (#​14364)
• feat(core): Further optimize debug ID parsing (#​14365)
• feat(node): Add openTelemetryInstrumentations option (#​14484)
• feat(nuxt): Add filter for not found source maps (devtools) (#​14437)
• feat(nuxt): Only delete public source maps (#​14438)
• fix(nextjs): Don't report NEXT_REDIRECT from browser (#​14440)
• perf(opentelemetry): Bucket spans for cleanup (#​14154)

Work in this release was contributed by @​NEKOYASAN and @​fmorett. Thank you for your contributions!

Bundle size 📦

Path	Size
@​sentry/browser	23.12 KB
@​sentry/browser - with treeshaking flags	21.84 KB
@​sentry/browser (incl. Tracing)	35.53 KB
@​sentry/browser (incl. Tracing, Replay)	72.44 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	62.81 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	76.76 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	89.21 KB
@​sentry/browser (incl. Feedback)	39.86 KB
@​sentry/browser (incl. sendFeedback)	27.73 KB
@​sentry/browser (incl. FeedbackAsync)	32.53 KB
@​sentry/react	25.8 KB
@​sentry/react (incl. Tracing)	38.36 KB
@​sentry/vue	27.28 KB
@​sentry/vue (incl. Tracing)	37.33 KB
@​sentry/svelte	23.27 KB
CDN Bundle	24.29 KB
CDN Bundle (incl. Tracing)	37.17 KB
CDN Bundle (incl. Tracing, Replay)	72.06 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	77.41 KB
CDN Bundle - uncompressed	71.37 KB
CDN Bundle (incl. Tracing) - uncompressed	110.4 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	223.47 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	236.69 KB
@​sentry/nextjs (client)	38.68 KB
@​sentry/sveltekit (client)	36.05 KB
@​sentry/node	135.06 KB
@​sentry/node - without tracing	96.89 KB
@​sentry/aws-serverless	107.09 KB

v8.40.0

Compare Source

Important Changes

• feat(angular): Support Angular 19 (#​14398)

  The @sentry/angular SDK can now be used with Angular 19. If you're upgrading to the new Angular version, you might want to migrate from the now deprecated APP_INITIALIZER token to provideAppInitializer.
  In this case, change the Sentry TraceService initialization in app.config.ts:

  // Angular 18
  export const appConfig: ApplicationConfig = {
    providers: [
      // other providers
      {
        provide: TraceService,
        deps: [Router],
      },
      {
        provide: APP_INITIALIZER,
        useFactory: () => () => {},
        deps: [TraceService],
        multi: true,
      },
    ],
  };
  
  // Angular 19
  export const appConfig: ApplicationConfig = {
    providers: [
      // other providers
      {
        provide: TraceService,
        deps: [Router],
      },
      provideAppInitializer(() => {
        inject(TraceService);
      }),
    ],
  };

• feat(core): Deprecate debugIntegration and sessionTimingIntegration (#​14363)

  The debugIntegration was deprecated and will be removed in the next major version of the SDK.
  To log outgoing events, use Hook Options (beforeSend, beforeSendTransaction, ...).

  The sessionTimingIntegration was deprecated and will be removed in the next major version of the SDK.
  To capture session durations alongside events, use Context (Sentry.setContext()).

• feat(nestjs): Deprecate @WithSentry in favor of @SentryExceptionCaptured (#​14323)

  The @WithSentry decorator was deprecated. Use @SentryExceptionCaptured instead. This is a simple renaming and functionality stays identical.

• feat(nestjs): Deprecate SentryTracingInterceptor, SentryService, SentryGlobalGenericFilter, SentryGlobalGraphQLFilter (#​14371)

  The SentryTracingInterceptor was deprecated. If you are using @sentry/nestjs you can safely remove any references to the SentryTracingInterceptor. If you are using another package migrate to @sentry/nestjs and remove the SentryTracingInterceptor afterwards.

  The SentryService was deprecated and its functionality was added to Sentry.init. If you are using @sentry/nestjs you can safely remove any references to the SentryService. If you are using another package migrate to @sentry/nestjs and remove the SentryService afterwards.

  The SentryGlobalGenericFilter was deprecated. Use the SentryGlobalFilter instead which is a drop-in replacement.

  The SentryGlobalGraphQLFilter was deprecated. Use the SentryGlobalFilter instead which is a drop-in replacement.

• feat(node): Deprecate nestIntegration and setupNestErrorHandler in favor of using @sentry/nestjs (#​14374)

  The nestIntegration and setupNestErrorHandler functions from @sentry/node were deprecated and will be removed in the next major version of the SDK. If you're using @sentry/node in a NestJS application, we recommend switching to our new dedicated @sentry/nestjs package.

Other Changes

• feat(browser): Send additional LCP timing info (#​14372)
• feat(replay): Clear event buffer when full and in buffer mode (#​14078)
• feat(core): Ensure normalizedRequest on sdkProcessingMetadata is merged (#​14315)
• feat(core): Hoist everything from @sentry/utils into @sentry/core (#​14382)
• fix(core): Do not throw when trying to fill readonly properties (#​14402)
• fix(feedback): Fix __self and __source attributes on feedback nodes (#​14356)
• fix(feedback): Fix non-wrapping form title (#​14355)
• fix(nextjs): Update check for not found navigation error (#​14378)

Bundle size 📦

Path	Size
@​sentry/browser	22.88 KB
@​sentry/browser - with treeshaking flags	21.57 KB
@​sentry/browser (incl. Tracing)	35.46 KB
@​sentry/browser (incl. Tracing, Replay)	72.22 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	62.53 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	76.52 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	89.02 KB
@​sentry/browser (incl. Feedback)	39.63 KB
@​sentry/browser (incl. sendFeedback)	27.51 KB
@​sentry/browser (incl. FeedbackAsync)	32.32 KB
@​sentry/react	25.58 KB
@​sentry/react (incl. Tracing)	38.32 KB
@​sentry/vue	27.04 KB
@​sentry/vue (incl. Tracing)	37.27 KB
@​sentry/svelte	23.03 KB
CDN Bundle	24.04 KB
CDN Bundle (incl. Tracing)	37.02 KB
CDN Bundle (incl. Tracing, Replay)	71.81 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	77.16 KB
CDN Bundle - uncompressed	70.9 KB
CDN Bundle (incl. Tracing) - uncompressed	110.25 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	223.05 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	236.27 KB
@​sentry/nextjs (client)	38.42 KB
@​sentry/sveltekit (client)	35.97 KB
@​sentry/node	134.48 KB
@​sentry/node - without tracing	96.32 KB
@​sentry/aws-serverless	106.57 KB

vitejs/vite-plugin-react-swc (@​vitejs/plugin-react-swc)

v3.7.2

Compare Source

Add Vite 6 to peerDependencies range #​207

Thanks @​RobinTail

Revert throw when refresh runtime is loaded twice #​237

Revert the throw when refresh runtime is loaded twice to enable usage in micro frontend apps. This was added to help fix setup usage, and this is not worth an annoying warning for others or a config parameter.

This revert was done in the Babel plugin last year and I didn't port it back.

dargmuesli/github-actions (dargmuesli/github-actions)

v2.3.7

Compare Source

Bug Fixes

• schedule release (cb74dee)

v2.3.6

Compare Source

Bug Fixes

• schedule release (58b56b2)

microsoft/TypeScript (typescript)

v5.7.2

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.16.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.