chore(deps): update all non-major dependencies #215

renovate · 2026-01-19T19:56:18Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/node (source)	`10.34.0` → `10.38.0`
@sentry/profiling-node (source)	`10.34.0` → `10.38.0`
@types/node (source)	`24.10.9` → `24.10.10`
axios (source)	`1.13.2` → `1.13.4`
cors	`2.8.5` → `2.8.6`
express-session	`1.18.2` → `1.19.0`

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v10.38.0`

Compare Source

Important Changes

feat(tanstackstart-react): Auto-instrument request middleware (#18989)

The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes

feat: Use v4.8.0 bundler plugins (#18993)
feat(browser): Add logs.metrics bundle (#19020)
feat(browser): Add replay.logs.metrics bundle (#19021)
feat(browser): Add tracing.replay.logs.metrics bundle (#19039)
feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#19042)
feat(node): Add AI manual instrumentation exports to Node (#19063)
feat(wasm): initialised sentryWasmImages for webworkers (#18812)
fix(core): Classify custom AggregateErrors as exception groups (#19053)
fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#19010)
fix(react): Avoid String(key) to fix Symbol conversion error (#18982)
fix(react): Prevent lazy route handlers from updating wrong navigation span (#18898)

Internal Changes

- feat(deps-dev): bump @types/rsvp from 4.0.4 to 4.0.9 ([#19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @edge-runtime/types from 3.0.1 to 4.0.0 ([#19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @vercel/nft from 0.29.4 to 1.3.0 ([#19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @actions/artifact from 2.1.11 to 5.0.3 ([#19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @remix-run deps to 2.17.4 ([#19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @react-router/node, @react-router/serve, @react-router/dev to 7.13.0 ([#19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @remix-run/router to ^1.23.2 ([#19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @solidjs/start ([#19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @harshit078. Thank you for your contribution!

`v10.37.0`

Compare Source

Important Changes

feat(core): Introduces a new Sentry.setConversationId() API to track multi turn AI conversations across API calls. (#18909)

You can now set a conversation ID that will be automatically applied to spans within that scope. This allows you to link traces from the same conversation together.
```
import * as Sentry from '@&#8203;sentry/node';

// Set conversation ID for all subsequent spans
Sentry.setConversationId('conv_abc123');

// All AI spans will now include the gen_ai.conversation.id attribute
await openai.chat.completions.create({...});
```
This is particularly useful for tracking multiple AI API calls that are part of the same conversation, allowing you to analyze entire conversation flows in Sentry.
The conversation ID is stored on the isolation scope and automatically applied to spans via the new conversationIdIntegration.
feat(tanstackstart-react): Auto-instrument global middleware in sentryTanstackStart Vite plugin (#18844)

The sentryTanstackStart Vite plugin now automatically instruments requestMiddleware and functionMiddleware arrays in createStart(). This captures performance data without requiring manual wrapping.

Auto-instrumentation is enabled by default. To disable it:
```
// vite.config.ts
sentryTanstackStart({
  authToken: process.env.SENTRY_AUTH_TOKEN,
  org: 'your-org',
  project: 'your-project',
  autoInstrumentMiddleware: false,
});
```

Other Changes

feat(core): simplify truncation logic to only keep the newest message (#18906)
feat(core): Support new client discard reason invalid (#18901)
feat(deps): Bump OpenTelemetry instrumentations (#18934)
feat(nextjs): Update default ignore list for sourcemaps (#18938)
feat(node): pass prisma instrumentation options through (#18900)
feat(nuxt): Don't run source maps related code on Nuxt "prepare" (#18936)
feat(replay): Update client report discard reason for invalid sessions (#18796)
feat(winston): Add customLevelMap for winston transport (#18922)
feat(react-router): Add support for React Router instrumentation API (#18580)
fix(astro): Do not show warnings for valid options (#18947)
fix(core): Report well known values in gen_ai.operation.name attribute (#18925)
fix(node-core): ignore vercel AbortError by default on unhandled rejection (#18973)
fix(nuxt): include sentry.config.server.ts in nuxt app types (#18971)
fix(profiling): Add platform to envelope item header (#18954)
fix(react): Defer React Router span finalization until lazy routes load (#18881)
ref(core): rename gen_ai.input.messages.original_length to sentry.sdk_meta.gen_ai.input.messages.original_length (#18970)
ref(core): rename gen_ai.request.messages to gen_ai.input.messages (#18944)
ref(core): Set system message as separate attribute (#18978)
deps: Bump version of sentry-bundler-plugins (#18972)

Internal Changes

chore(e2e): Add e2e claude skill (#18957)
chore(e2e): Add Makefile to make running specific e2e test apps easier (#18953)
chore(e2e): Modify e2e skill to also account for untracked files (#18959)
ref(tests): use constants in ai integration tests and add missing ones (#18945)
test(nextjs): Added nextjs CF workers test app (#18928)
test(prisma): Move to yarn prisma (#18975)

Work in this release was contributed by @sebws, @harshit078, and @fedetorre. Thank you for your contributions!

`v10.36.0`

Compare Source

`v10.35.0`

Compare Source

Important Changes

feat(tanstackstart-react): Add sentryTanstackStart vite plugin to manage automatic source map uploads (#18712)

You can now configure source maps upload for TanStack Start using the sentryTanstackStart Vite plugin:

// vite.config.ts
import { defineConfig } from 'vite';
import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react';
import { tanstackStart } from '@&#8203;tanstack/react-start/plugin/vite';

export default defineConfig({
  plugins: [
    sentryTanstackStart({
      authToken: process.env.SENTRY_AUTH_TOKEN,
      org: 'your-org',
      project: 'your-project',
    }),
    tanstackStart(),
  ],
});

Other Changes

feat(browser): Add CDN bundle for tracing.replay.feedback.logs.metrics (#18785)
feat(browser): Add shim package for logs (#18831)
feat(cloudflare): Automatically set the release id when CF_VERSION_METADATA is enabled (#18855)
feat(core): Add ignored client report event drop reason (#18815)
feat(logs): Add Log exports to browser and node packages (#18857)
feat(node-core,bun): Export processSessionIntegration from node-core and add it to bun (#18852)
fix(core): Find the correct IP address regardless their case (#18880)
fix(core): Check for AI operation id to detect a vercelai span (#18823)
fix(ember): Use ES5 syntax in inline vendor scripts (#18858)
fix(fetch): Shallow-clone fetch options to prevent mutation (#18867)

Internal Changes

chore(ci): Use javascript-sdk-gitflow app instead of personal token (#18829)
chore(deps): Bump @sveltejs/kit devDependency to 2.49.5 (#18848)
chore(deps): Bump bundler plugins to ^4.6.2 (#18822)
chore(deps): bump hono from 4.10.3 to 4.11.4 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#18806)
chore(test): Bump svelte dependencies (#18850)
chore(core): Comment out Error tests in langchain (#18837)
meta(changelog): Fix entry for tanstack start vite plugin (#18883)
test(e2e): Add testing app for User Feedback (#18877)
test(fastify): Verify if upstream error is fixed and won't regress (#18838)

Work in this release was contributed by @rreckonerr. Thank you for your contribution!

axios/axios (axios)

`v1.13.4`

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)
- Fixed issues discovered in v1.13.3 release
- Cleaned up interceptor test files
- Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)
- Major refactoring of CI/CD workflows
- Consolidated workflow files for better maintainability
- Added mise configuration for the development environment
- Improved sponsor block update automation
- Enhanced issue and PR templates
- Added automatic release notes generation
- Implemented workflow cancellation for concurrent runs
chore: codegen and some updates to workflows (76cf77b)
- Code generation improvements
- Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

jasonsaayman - Release management and CI/CD improvements

`v1.13.3`

Compare Source

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
interceptor: handle the error in the same interceptor (#6269) (5945e40)
main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)
add automatic minor and patch upgrades to dependabot (#6053) (65a7584)
add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)
added copilot instructions (3f83143)
compatibility with frozen prototypes (#6265) (860e033)
enhance pipeFileToResponse with error handling (#7169) (88d7884)
types: Intellisense for string literals in a widened union (#6134) (f73474d), closes /github.com/microsoft/TypeScript/issues/33471#issuecomment-1376364329

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

expressjs/cors (cors)

`v2.8.6`

Compare Source

==================

Improve documentation (API, context, examples...)
Remove additional markdown files from tarball

expressjs/session (express-session)

`v1.19.0`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~chore(deps): update all non-major dependencies to v10.35.0~~ chore(deps): update all non-major dependencies to v10.36.0 Jan 21, 2026

renovate bot force-pushed the renovate/all-minor-patch branch from 51b100c to 3fe316d Compare January 21, 2026 16:35

renovate bot changed the title ~~chore(deps): update all non-major dependencies to v10.36.0~~ chore(deps): update all non-major dependencies Jan 22, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from ec6a974 to d8ce46b Compare January 27, 2026 21:00

renovate bot force-pushed the renovate/all-minor-patch branch from d8ce46b to be8d643 Compare January 29, 2026 18:33

chore(deps): update all non-major dependencies

6893230

renovate bot force-pushed the renovate/all-minor-patch branch from be8d643 to 6893230 Compare February 3, 2026 09:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #215

chore(deps): update all non-major dependencies #215

renovate bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

chore(deps): update all non-major dependencies #215

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #215

Conversation

renovate bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Important Changes

Other Changes

Important Changes

Other Changes

Important Changes

Other Changes

Overview

What's New in v1.13.4

Bug Fixes

Infrastructure & CI/CD

Migration Notes

Breaking Changes

Deprecations

Contributors

Bug Fixes

Features

Reverts

Contributors to this release

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 19, 2026 •

edited

Loading