chore(deps): update all minor and patch dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/node (source)	^10.56.0 → ^10.64.0
@sentry/types (source)	^10.56.0 → ^10.64.0
@types/node (source)	^25.9.2 → ^25.9.4
axios (source)	^1.17.0 → ^1.18.1
mongoose (source)	^9.6.3 → ^9.7.4

---

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v10.64.0

Compare Source

Important Changes

• feat(cloudflare): Add nodejs_compat entrypoint (#​21881)

  The Cloudflare SDK now ships a dedicated @sentry/cloudflare/nodejs_compat entrypoint for Workers running with the nodejs_compat flag. This entrypoint unlocks Node SDK features on Cloudflare, including the prismaIntegration (#​21882) and AI v7 support for the vercelAiIntegration (#​21917).

  This entrypoint is a drop-in replacement, so you can switch your imports from @sentry/cloudflare directly to @sentry/cloudflare/nodejs_compat. To use it, your Worker must set the nodejs_compat compatibility flag in wrangler.toml/wrangler.jsonc. This will become the default entrypoint in v11.

• feat: Use Sentry's minimal OpenTelemetry tracer provider by default (#​21666, #​21680, #​21842)

  The Node SDK now registers Sentry's own minimal SentryTracerProvider by default, which creates native Sentry spans directly instead of routing them through the full OpenTelemetry SDK span pipeline. This reduces overhead for the common case where you don't need the full OpenTelemetry tracing stack.

  If you rely on OpenTelemetry SDK features that the minimal provider doesn't support, you can opt out and fall back to the full OpenTelemetry BasicTracerProvider by setting openTelemetryBasicTracerProvider: true in your Sentry.init() options. Providing custom openTelemetrySpanProcessors also forces the full provider automatically.

Other Changes

• feat(bun,deno,node): pg orchestrion instrumentation (#​21826)
• feat(bun): enable new mysql, pg integrations in 'bun build' (#​21828)
• feat(cloudflare): Enable AI v7 support for Cloudflare in the /nodejs_compat entrypoint (#​21917)
• feat(cloudflare): Expose prismaIntegration in nodejs_compat export (#​21882)
• feat(core): Add sentry.trace_lifecycle attribute (#​21850)
• feat(core): Add deferred segment-span transaction capture (#​21839)
• feat(deps): Bump OpenTelemetry dependencies to latest (#​21988)
• feat(mongoose): Instrument mongoose >= 9.7 via native tracing channels (#​21803)
• feat(replays): Record segment names that occur during replay (#​21851)
• fix(browser): Accept precisely-typed GrowthBook class in growthbookIntegration (#​21825)
• fix(browser): Flush telemetry when page is hidden (#​21862)
• fix(cloudflare): Catch potential errors during flush and dispose (#​21976)
• fix(core): Capture Anthropic stream stop_reason from message_delta (#​21907)
• fix(core): Print getTraceMetaTags in 1 line to prevent hydration errors (#​22004)
• fix(nextjs): Add immutable browser chunks to upload assets (#​21978)
• fix(nextjs): Handle Middleware.execute root spans on Node.js runtime (#​22013)
• fix(react/solid/vue): Instrument TanStack Router navigations via onBeforeLoad/onResolved (#​21975)

Internal Changes

• chore: Add experimentalUseDiagnosticsChannelInjection in node size-limit (#​21992)
• chore: Add external contributor to CHANGELOG.md (#​21945)
• chore: Clarify usage of hoistTransitiveImports option (#​21888)
• chore: Make @​sentry/conventions sideEffect free during bundling (#​22015)
• chore: Remove runtime ESM/CJS switching (#​21761)
• chore(ci): Replace app-id with client-id in GH workflows (#​21914)
• chore(cloudflare): Disallow Node SDK usage outside of nodejs_compat (#​21884)
• chore(cloudflare): Disallow server-utils usage outside of nodejs_compat (#​21918)
• chore(node-core): Move isCjs to its own file to prevent sideEffects (#​21856)
• ci: Increase Node integration test timeout to 20 minutes (#​21903)
• deps(server-utils): Bump @​apm-js-collab/tracing-hooks to 0.10.1 (#​21892)
• feat(server-utils): Implement orchestrion-based instrumentation for vercel-ai v6 (#​21658)
• feat(server-utils): Migrate @opentelemetry/instrumentation-ioredis to orchestrion (#​21849)
• feat(server-utils): Migrate Anthropic integration to orchestrion (#​21902)
• feat(server-utils): Migrate OpenAI integration to orchestrion (#​21877)
• feat(server-utils): Rewrite @opentelemetry/instrumentation-hapi to orchestrion (#​21866)
• ref(core): Add @sentry/conventions to @sentry/core and align versions (#​21855)
• ref(deno): add deno-integration-tests dev-package (#​21827)
• ref(node-core): Move node fetch instrumentation into node-core (#​21873)
• ref(node): Fold breadcrumb & trace propagation into node fetch instrumentation (#​21872)
• ref(node): Refactor orchestrion config into separate files (#​21957)
• ref(node): Streamline Prisma v5 instrumentation (#​21980)
• ref(node): Use @sentry/conventions and vendor remaining semantic conventions (#​21893)
• test(browser): Fix web worker route-registration race in debug ID test (#​21920)
• test(e2e): Fix failing nitro-3 e2e test due to broken dependency (#​21895)
• test(e2e): Revert nf3 dependency override in nitro-3 e2e test (#​21951)
• test(e2e): Use injectDiagnostics for orchestrion marker (#​21987)
• test(google-genai): Move google-genai integration tests to use a real client (#​21909)
• test(nextjs): Tolerate aborted navigation in streaming RSC error E2E test (#​21847)
• test(node): Attempt to unflake docker-based node integration tests (#​21905)
• test(node): Automatically run all node-integration tests with orchestrion (#​21911)
• test(node): Collapse mysql span streaming tests into same suite (#​21890)
• test(node): Ensure logs are auto-printed when a test fails (#​21887)
• test(node): Improve tests for Prisma v5 (#​21876)
• test(node): Migrate fs & contextLines-filename integration tests to helpers (#​21958)
• test(node): Migrate http client span tests to createCjsTests (#​21956)
• test(node): Migrate logging integration tests to create*Tests helpers (#​21955)
• test(node): Refactor remaining express integrations tests to new runner (#​21949)
• test(node): Update pg-native tests to use additionalDependencies (#​21878)
• tests(core): Move anthropic node integration tests to use a real client (#​21906)

Work in this release was contributed by @​codr and @​zenato. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	26.94 KB
@​sentry/browser - with treeshaking flags	25.42 KB
@​sentry/browser (incl. Tracing)	45.16 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.89 KB
@​sentry/browser (incl. Tracing, Profiling)	49.82 KB
@​sentry/browser (incl. Tracing, Replay)	83.53 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.38 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.12 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.48 KB
@​sentry/browser (incl. Feedback)	43.71 KB
@​sentry/browser (incl. sendFeedback)	31.62 KB
@​sentry/browser (incl. FeedbackAsync)	36.63 KB
@​sentry/browser (incl. Metrics)	28 KB
@​sentry/browser (incl. Logs)	28.23 KB
@​sentry/browser (incl. Metrics & Logs)	28.9 KB
@​sentry/react	28.7 KB
@​sentry/react (incl. Tracing)	47.38 KB
@​sentry/vue	32.25 KB
@​sentry/vue (incl. Tracing)	46.98 KB
@​sentry/svelte	26.97 KB
CDN Bundle	29.3 KB
CDN Bundle (incl. Tracing)	47.11 KB
CDN Bundle (incl. Logs, Metrics)	30.83 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.38 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.15 KB
CDN Bundle (incl. Tracing, Replay)	83.73 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.99 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.38 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.64 KB
CDN Bundle - uncompressed	87.26 KB
CDN Bundle (incl. Tracing) - uncompressed	142.54 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	91.85 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	146.42 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	213.62 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	258.91 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	262.78 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	272.29 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	276.15 KB
@​sentry/nextjs (client)	49.75 KB
@​sentry/sveltekit (client)	45.56 KB
@​sentry/core/server	76.54 KB
@​sentry/core/browser	63.21 KB
@​sentry/node-core	61.73 KB
@​sentry/node	120.85 KB
@​sentry/node (incl. diagnostics channel injection)	126.65 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	68.31 KB
@​sentry/node/light	49.53 KB
@​sentry/node - without tracing	73.06 KB
@​sentry/aws-serverless	83.59 KB
@​sentry/cloudflare (withSentry) - minified	177.42 KB
@​sentry/cloudflare (withSentry)	438.86 KB

v10.63.0

Compare Source

• feat(browser): Add url.full attribute to resource spans (#​21846)
• feat(core): Add extendIntegration method (#​21759)
• feat(core): Add isTracingSuppressed to the async context strategy (#​21785)
• feat(core): Pass normalizedRequest to the sampling context for root spans (#​21833)
• feat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection (#​21786)
• feat(node): Expose channel-based, streamlined fastifyIntegration (#​21706)
• fix(browser): Defer sending session envelope until browser is idle (#​21844)
• fix(core): Improve waiting for tracing channel bindings (#​21815)
• fix(core): Serialize streamed span status message to sentry.status.message attribute (#​21811)
• fix(nextjs): Don't inject trace meta tags when Cache Components is enabled (#​21141)
• fix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment (#​21848)
• fix(tanstackstart-react): Drop server transactions for tunnel route requests (#​21769)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​21832)
• chore: Hoist transitive imports for bundles (#​21858)
• chore: Mark http.query/http.fragment stripping for v11 url.query migration (#​21852)
• docs: Use Cloudflare nodejs_compat flag (#​21659)
• feat(server-utils): Add lru-memoizer diagnostics-channel integration (#​21786)
• feat(server-utils): Expose channel-based, streamlined fastifyIntegration (#​21706)
• feat(server-utils): Restore caller context for callback tracing channels (#​21863)
• ref(core): Move spanStreamingIntegration setup into ServerRuntimeClient (#​21814)
• ref(node): Infer orchestrion integration names (#​21834)
• ref(node): Move node-fetch instrumentation away from InstrumentBase (#​21778)
• ref(node): Streamline Prisma instrumentation (v6 and v7) (#​21819)
• ref(node): Streamline vendored mysql instrumentation (#​21568)
• ref(server-utils): Ensure ts3.8 has diagnostics channel shim (#​21845)
• ref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan (#​21865)
• ref(server-utils): Set error attributes on span and simplify error info extraction (#​21822)
• test: Introduce .unordered in node-integration-tests (#​21697)
• test(cloudflare): Align CF types and compat flags (#​21835)
• test(e2e/hono): Isolate request-data extraction tests onto a dedicated route (#​21869)
• test(node-integration): Harden knex mysql2 healthcheck to fix flaky test (#​21868)
• test(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering (#​21870)
• test(node-integration-tests): Retry transient docker compose up failures (#​21860)
• test(nuxt): Test mysql instrumentation with orchestrion bundler plugin (#​21782)

Work in this release was contributed by @​suzunn. Thank you for your contribution!

v10.62.0

Compare Source

Important Changes

• feat(server-runtimes): Add v7 support for vercelAiIntegration (#​21613)

  The vercelAiIntegration now supports v7 of the ai package. Note that v7 is not yet supported on Cloudflare.

Other Changes

• fix(node): Avoid failing at runtime if tracingChannel is not available (#​21783)
• fix(sveltekit): Avoid capturing preloaded 400 errors on client (#​21784)

Work in this release was contributed by @​hyunbinseo. Thank you for your contribution!

Internal Changes

• chore(github): Update tracked packages (#​21789)
• feat(core): Add spanKindToName helper for reverse span-kind lookup (#​21780)
• ref(aws-serverless): Streamline AwsLambda instrumentation (#​21758)
• ref(node): Fix server-utils name for VercelAI integration (#​21809)
• ref(node): Streamline amqplib instrumentation (#​21753)
• ref(node): Streamline Firebase instrumentation (#​21748)
• test: Pin webpack to 5.107.0 (#​21781)
• test(e2e): Add no-browser-session lighthouse e2e test mode (#​21787)
• test(e2e): Add more test modes, pre-init and element timing (#​21760)

Bundle size 📦

Path	Size
@​sentry/browser	26.83 KB
@​sentry/browser - with treeshaking flags	25.3 KB
@​sentry/browser (incl. Tracing)	44.89 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.6 KB
@​sentry/browser (incl. Tracing, Profiling)	49.57 KB
@​sentry/browser (incl. Tracing, Replay)	83.22 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.06 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.8 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.17 KB
@​sentry/browser (incl. Feedback)	43.61 KB
@​sentry/browser (incl. sendFeedback)	31.5 KB
@​sentry/browser (incl. FeedbackAsync)	36.52 KB
@​sentry/browser (incl. Metrics)	27.87 KB
@​sentry/browser (incl. Logs)	28.11 KB
@​sentry/browser (incl. Metrics & Logs)	28.78 KB
@​sentry/react	28.59 KB
@​sentry/react (incl. Tracing)	47.15 KB
@​sentry/vue	31.86 KB
@​sentry/vue (incl. Tracing)	46.71 KB
@​sentry/svelte	26.85 KB
CDN Bundle	29.18 KB
CDN Bundle (incl. Tracing)	46.77 KB
CDN Bundle (incl. Logs, Metrics)	30.7 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.08 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.12 KB
CDN Bundle (incl. Tracing, Replay)	83.4 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.05 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.28 KB
CDN Bundle - uncompressed	86.86 KB
CDN Bundle (incl. Tracing) - uncompressed	141.63 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	91.45 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	145.51 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	213.5 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	257.86 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	261.72 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.24 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	275.09 KB
@​sentry/nextjs (client)	49.48 KB
@​sentry/sveltekit (client)	45.28 KB
@​sentry/core/server	75.64 KB
@​sentry/core/browser	62.31 KB
@​sentry/node-core	60.07 KB
@​sentry/node	120.54 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	68.31 KB
@​sentry/node/light	49.22 KB
@​sentry/node - without tracing	71.88 KB
@​sentry/aws-serverless	82.42 KB
@​sentry/cloudflare (withSentry) - minified	176.08 KB
@​sentry/cloudflare (withSentry)	435.78 KB

v10.61.0

Compare Source

Important Changes

• feat(core): Enable streamGenAiSpans by default (#​21732)

  The SDK now extracts all gen_ai spans out of a transaction and sends them as v2 envelope items by default. This prevents gen_ai spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated by default. Set enableTruncation: true on the respective AI integration to re-enable truncation. To keep the previous behavior, set streamGenAiSpans: false.

  Self-hosted Sentry users should opt out with streamGenAiSpans: false, since streamed gen_ai spans may not be ingested by their Sentry instance.

Other Changes

• feat(cloudflare): Add batch, exec, and withSession D1 instrumentation (#​21292)
• feat(cloudflare): Instrument SQL API in sqlite durable objects (#​21656)
• feat(core): Add db.query.summary functionality (#​21670)
• feat(core): Add top-level Sentry.setAttribute(s) APIs (#​21705)
• fix(hono): Name transactions after the matched route handler (#​21700)
• fix(react-router): Bump peerDependencies for react-router 8 (#​21762)
• fix(replays): Record replay trace_ids with span streaming (#​21714)

Internal Changes

• build: add rollup plugin for compile-time ESM/CJS code branching (#​21715)
• chore: Fix version bump for bundler plugin fixtures (#​21707)
• chore(node-integration-tests): Improve node test runner naming (#​21685)
• docs: Update contributing guide for E2E tests (#​21763)
• feat: Adopt bindTracingChannelToSpan across runtimes (#​21642)
• feat: Remove Otel from fsIntegration (#​21654)
• feat(deps): Bump http-proxy-middleware from 2.0.9 to 2.0.10 (#​21709)
• feat(server-utils): Add tracingChannel-to-span binding (#​21641)
• fix(tests): Add dedicated route for Hono query_string tests (#​21731)
• ref: Export SPAN_KIND from core and drop OTel SpanKind imports (#​21668)
• test: Make bundler plugins tests work after release
• test: Remove duplicated test (#​21699)
• test: retry npm install on network hiccups (#​21689)
• test(cloudflare): Increase node count for memory tests (#​21719)
• test(e2e): Add sentry-sdk-init measure and marks (#​21687)
• test(e2e): Add more lighthouse react e2e test SDK init modes (#​21711)
• test(node): Add esm/cjs specific test runner utils (#​21729)
• test(node): Increase cron integration test timeout to 60s (#​21704)
• test(node): Streamline amqplib tests (#​21723)
• test(node): Update mysql tests for better coverage and correctness (#​21684)
• test(node): Use different ports for redis tests (#​21727)

Bundle size 📦

Path	Size
@​sentry/browser	26.83 KB
@​sentry/browser - with treeshaking flags	25.3 KB
@​sentry/browser (incl. Tracing)	44.89 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.6 KB
@​sentry/browser (incl. Tracing, Profiling)	49.57 KB
@​sentry/browser (incl. Tracing, Replay)	83.22 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.06 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.8 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.17 KB
@​sentry/browser (incl. Feedback)	43.61 KB
@​sentry/browser (incl. sendFeedback)	31.5 KB
@​sentry/browser (incl. FeedbackAsync)	36.52 KB
@​sentry/browser (incl. Metrics)	27.87 KB
@​sentry/browser (incl. Logs)	28.11 KB
@​sentry/browser (incl. Metrics & Logs)	28.78 KB
@​sentry/react	28.59 KB
@​sentry/react (incl. Tracing)	47.15 KB
@​sentry/vue	31.86 KB
@​sentry/vue (incl. Tracing)	46.71 KB
@​sentry/svelte	26.85 KB
CDN Bundle	29.18 KB
CDN Bundle (incl. Tracing)	46.77 KB
CDN Bundle (incl. Logs, Metrics)	30.7 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.08 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.12 KB
CDN Bundle (incl. Tracing, Replay)	83.4 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.05 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.28 KB
CDN Bundle - uncompressed	86.86 KB
CDN Bundle (incl. Tracing) - uncompressed	141.63 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	91.45 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	145.51 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	213.5 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	257.86 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	261.72 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.24 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	275.09 KB
@​sentry/nextjs (client)	49.48 KB
@​sentry/sveltekit (client)	45.28 KB
@​sentry/core/server	75.47 KB
@​sentry/core/browser	62.14 KB
@​sentry/node-core	60.07 KB
@​sentry/node	119.78 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	68.31 KB
@​sentry/node/light	49.22 KB
@​sentry/node - without tracing	71.83 KB
@​sentry/aws-serverless	82.75 KB
@​sentry/cloudflare (withSentry) - minified	176.08 KB
@​sentry/cloudflare (withSentry)	435.78 KB

v10.60.0

Compare Source

v10.59.0

Compare Source

Important Changes

• feat(react-router): Add support for React Router v8 (#​21633)

  The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

• feat(react): Add version-agnostic React Router SPA exports (#​21633)

  @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation.
  The new exports replace the version-specific V6/V7 variants, which are now deprecated:

  Deprecated	New
  reactRouterV6BrowserTracingIntegration / V7	reactRouterBrowserTracingIntegration
  withSentryReactRouterV6Routing / V7	wrapReactRouterRouting
  wrapCreateBrowserRouterV6 / V7	wrapCreateBrowserRouter
  wrapCreateMemoryRouterV6 / V7	wrapCreateMemoryRouter
  wrapUseRoutesV6 / V7	wrapUseRoutes

  The deprecated exports continue to work and will be removed in the next major version.

Other Changes

• feat(aws-serverless): Instrument aws-sdk clients >= 3.1046.0 (#​21548)
• feat(bun): Add orchestrion bun build plugin (#​21410)
• feat(cloudflare): Instrument sync KV (#​21316)
• feat(core): Disable gen_ai message truncation by default when streamGenAiSpans is enabled (#​21603)
• feat(deno): Add orchestrion deno runtime hook (#​21451)
• feat(hono): Extend peer dependency range (#​21550)
• feat(node): Collapse orchestrion opt-in to a single option (#​20900)
• fix: Diagnostics channel Node v18 (#​21631)
• fix(browser): Clean up pageload readystatechange listener (#​21632)
• fix(core): Capture scopes on span before emitting spanStart event (#​21644)
• fix(core): Defer TwP sampling by reading trace state from the scope (#​21549)
• fix(core): Prevent outgoing HTTP instrumentation from crashing on // request paths (#​21645)
• fix(core): Set production as default sentry.environment attribute value on streamed spans (#​21637)
• fix(nextjs): Register safe random ID context at module load (#​21573)

Internal Changes

• chore: Change deprecation/deprecation to oxlint equivalent (#​21604)
• chore: Switch license headers to SPDX format (#​21357)
• chore(deps-dev): Bump esbuild from 0.20.0 to 0.28.1 (#​21511)
• chore(deps): Bump esbuild from 0.25.0 to 0.28.1 in /dev-packages/e2e-tests/test-applications/node-profiling-esm (#​21514)
• chore(deps): Bump react-router-6 to 6.30.4 (#​21566)
• ci: Assign server team as codeowner for server-utils package (#​21601)
• ci: Dedup flaky test issues across esm/cjs variants (#​21595)
• ci: Do not apply Bug label to flaky test issues (#​21593)
• ci: Pin react-router latest and add eslint disable for deprecated attribute (#​21624)
• ci(deps): Bump actions/download-artifact from 7 to 8 (#​21303)
• ci(security-fixes): Enable cron trigger (#​21547)
• docs: Clarify comment and PR-body guidelines for agents (#​21596)
• feat(deps-dev): Bump @​sveltejs/kit from 2.53.3 to 2.60.1 in /dev-packages/e2e-tests/test-applications/sveltekit-2-svelte-5 (#​21212)
• feat(deps-dev): Bump esbuild from 0.19.12 to 0.28.1 in /dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev (#​21512)
• feat(deps): Bump @​babel/core from 7.29.0 to 7.29.6 (#​21574)
• feat(deps): Bump @​prisma/adapter-pg from 7.2.0 to 7.8.0 (#​21106)
• feat(deps): Bump hono from 4.12.21 to 4.12.25 (#​21610)
• feat(deps): Bump launch-editor from 2.12.0 to 2.14.1 (#​21577)
• feat(deps): Bump protobufjs from 7.5.9 to 7.6.4 (#​21578)
• feat(deps): Bump vite from 5.4.21 to 6.4.3 (#​21576)
• fix(node): Restore eslint-disable in vendored tedious instrumentation (#​21616)
• ref(aws-serverless): Remove unused parts of vendored aws-sdk instrumentation (#​21563)
• ref(aws-serverless): Streamline aws-sdk instrumentation (#​21564)
• ref(aws-serverless): Use @sentry/conventions (#​21597)
• ref(build): Switch TypeScript moduleResolution to bundler (#​21559)
• ref(ci): Dedupe matrix test failures in CI failure reporter (#​21538)
• ref(ci): Skip PR review reminders for changes-requested PRs (#​21526)
• ref(nestjs): Set nest span op/origin at span creation (#​21531)
• ref(nestjs): Use @sentry/conventions (#​21492)
• ref(nextjs): Use @sentry/conventions (#​21493)
• ref(node-core): Use @sentry/conventions (#​21494)
• ref(node): Set generic-pool span origin at span creation (#​21533)
• ref(node): Streamline connect (#​21404)
• ref(node): Streamline graphql instrumentation ([#​21556](https://redirect.github.com/getsentry/sentry-javascript/p

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.