chore(deps): bump the everything-else group with 3 updates - #6501
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the everything-else group with 3 updates: [@sentry/react](https://github.com/getsentry/sentry-javascript), [dompurify](https://github.com/cure53/DOMPurify) and [jszip](https://github.com/Stuk/jszip). Updates `@sentry/react` from 10.73.0 to 10.74.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.74.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.73.0...10.74.0) Updates `dompurify` from 3.4.14 to 3.4.15 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.14...3.4.15) Updates `jszip` from 3.10.1 to 3.10.2 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.10.1...v3.10.2) --- updated-dependencies: - dependency-name: "@sentry/react" dependency-version: 10.74.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: dompurify dependency-version: 3.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: jszip dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 4448d85c7a
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@reduxjs/toolkit": "^2.12.0", | ||
| "@sentry/electron": "^7.18.0", | ||
| "@sentry/react": "^10.73.0", | ||
| "@sentry/react": "^10.74.0", |
There was a problem hiding this comment.
When Sentry is enabled in the Electron renderer, sentryElectron.ts passes this package's reactInit into @sentry/electron; however, Electron 7.18.0 and the root override still pin @sentry/browser/@sentry/core to 10.73.0. The resulting lockfile nests the 10.74.0 browser packages under React while forcing them to use the older 10.73.0 core, undoing the deliberate package alignment from e4d6f741 and risking the same incompatible Scope types or initialization/event-processing failures. Upgrade @sentry/electron and the core override together with React, or retain React 10.73.0.
Useful? React with 👍 / 👎.
Bumps the everything-else group with 3 updates: @sentry/react, dompurify and jszip.
Updates
@sentry/reactfrom 10.73.0 to 10.74.0Release notes
Sourced from @sentry/react's releases.
... (truncated)
Changelog
Sourced from @sentry/react's changelog.
Commits
ce5009arelease: 10.74.04b24dddmeta(changelog): Update changelog for 10.74.0 (#24252)371ed5dfix(v10/profiling-node): Bump@sentry/node-cpu-profilerto 2.4.4 (#24238)9f38e48fix(v10/browser): Setuser_agent.originalon all spans for consistent filte...264f990fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entr...c89f6e6fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundl...de25dcbfix(v10/core): GuardloadModuledefault parameter against ESM scope (#24154)b627037feat(v10): Streamline isolation scope handling & reset in isolation scopes (#...2ce0ea1fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute f...3e0ecccfix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (...Updates
dompurifyfrom 3.4.14 to 3.4.15Release notes
Sourced from dompurify's releases.
Commits
1d7460crelease: 3.4.15 (#1609)Updates
jszipfrom 3.10.1 to 3.10.2Changelog
Sourced from jszip's changelog.
Commits
020fa33Release preparation for 3.10.2 (#974)d38fda5Fix cross-realm binary type detection in getTypeOf (#578)e682f9aFix grunt build rebundling existing dist via browser field (#971)5adef36Add missing types for JSZip.defaults (#927)41a1342Fix blob support in Node.js 18 and up (#955)643714aMove all continuous integration to GitHub Actions (#942)418c11fUpgrade Playwright to the latest version (#940)2ceb998Create FUNDING.ymlMaintainer changes
This version was pushed to npm by jkoops, a new releaser for jszip since your current version.
Most Recent Ignore Conditions Applied to This Pull Request
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsNote
Low Risk
Patch-level dependency-only changes with no code or config logic edits; DOMPurify and Sentry touch security/observability but the scope is limited to version pins.
Overview
Routine Dependabot patch updates in
package.jsonandpackage-lock.jsononly—no application source changes.@sentry/reactmoves from 10.73.0 to 10.74.0 (used with@sentry/electronfor renderer error reporting).dompurifygoes 3.4.14 → 3.4.15 (markdown/HTML sanitization in the UI).jszipgoes 3.10.1 → 3.10.2 (e.g. RDI download packaging).The lockfile also reflects nested
@sentry/*10.74.0 entries under@sentry/reactand updated integrity hashes for the bumped packages.Reviewed by Cursor Bugbot for commit 4448d85. Bugbot is set up for automated code reviews on this repo. Configure here.