Skip to content

dev: bump the safe group with 4 updates#7973

Open
dependabot[bot] wants to merge 1 commit into
v3.36from
dependabot/npm_and_yarn/safe-e8f3ccdae8
Open

dev: bump the safe group with 4 updates#7973
dependabot[bot] wants to merge 1 commit into
v3.36from
dependabot/npm_and_yarn/safe-e8f3ccdae8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the safe group with 4 updates: @formatjs/intl-datetimeformat, @sentry/react, @storybook/cli and js-yaml.

Updates @formatjs/intl-datetimeformat from 7.5.1 to 7.5.2

Release notes

Sourced from @​formatjs/intl-datetimeformat's releases.

@​formatjs/intl-datetimeformat: 7.5.2

7.5.2 (2026-07-17)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@​formatjs/intl-datetimeformat@7.5.1...@​formatjs/intl-datetimeformat@7.5.2

Commits
  • 75edf1c chore: release main (#6894)
  • 8c3caf0 chore(deps): update pnpm to v11.11.0 (#6892)
  • a83fb42 chore(deps): update rust crate regex to v1.13.0 (#6890)
  • a9773b8 fix(@​formatjs/intl-datetimeformat): apply Date method defaults (#6893)
  • 0faf3f7 chore(deps): update dependency lucide-react to v1.24.0 (#6889)
  • b258031 chore(deps): update dependency @​babel/types to v8.0.4 (#6888)
  • 37ee812 chore(deps): update dependency vite to v8.1.4 (#6887)
  • 21202e0 fix(deps): update formatjs monorepo (#6886)
  • 6f23183 fix(deps): update dependency eslint-plugin-formatjs to v6.4.17 (#6885)
  • See full diff in compare view

Updates @sentry/react from 10.66.0 to 10.67.0

Release notes

Sourced from @​sentry/react's releases.

10.67.0

Important Changes

  • feat(sveltekit): Add support for SvelteKit 3 (#22264)

    The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.

Other Changes

  • feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in (#22143)
  • feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation (#22126)
  • feat(cloudflare): Instrument Cloudflare rate limiter bindings (#22035)
  • feat(core): Instrument workers-ai-provider (#22119)
  • feat(core): Rename queryParams to urlQueryParams (#22217)
  • feat(mongodb): implement orchestrion mongodb integration (#22308)
  • feat(mongoose): implement orchestrion mongoose integration (#22202)
  • feat(node): Rewrite tedious instrumentation to orchestrion tracing channels (#22238)
  • feat(nuxt): Add _experimental.useDiagnosticsChannelInjection (#22323)
  • feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • feat(replay): Allow skipping the final flush on stop() via { flush: false } (#22300)
  • feat(server-utils): Add @​opentelemetry/instrumentation-koa orchestrion integration (#22146)
  • feat(server-utils): Add orchestrion aws-sdk channel integration core (#22142)
  • feat(server-utils): Allow passing custom transforms to orchestrion (#22319)
  • feat(server-utils): Port Bedrock aws-sdk extension and add integration tests (#22166)
  • feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions (#22164)
  • feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation (#22165)
  • feat(server-utils): Rewrite SentryLangChainInstrumentation to orchestrion (#22266)
  • feat(server-utils): Rewrite SentryLangGraphInstrumentation to orchestrion (#22268)
  • feat(vue): Set navigation.route.id from the route name (#22372)
  • fix(bundler): do not import type from optional peer dep (#22304)
  • fix(cloudflare): Bind Durable Object built-in handlers (#22340)
  • fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods (#22310)
  • fix(cloudflare): Route DO teardown through original waitUntil (#22339)
  • fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries (#22376)
  • fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms (#22273)
  • fix(core): Prevent infinite recursion when console is instrumented twice (#21959)
  • fix(nextjs): Mark internal chunk frames as not in_app (#22354)
  • fix(node): Register tracer provider when OTel API global pre-exists with a different version (#22374)
  • fix(node-native): Don't drop breadcrumbs from event loop block events (#22322)
  • fix(serve-rutils): Orchestrion diagnostics for async and require (#22327)
  • fix(server-utils): Only skip loader thread (#22336)
  • fix(sveltekit): Detect SvelteKit server build via Vite Environment API (#21629)
  • fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode (#22293)
  • fix(vue): Support pinia 4 in peer dependency range (#22324)
  • chore: Add external contributor to CHANGELOG.md (#22357)
  • chore: Add external contributor to CHANGELOG.md (#22359)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.67.0

Important Changes

  • feat(sveltekit): Add support for SvelteKit 3 (#22264)

    The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.

Other Changes

  • feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in (#22143)
  • feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation (#22126)
  • feat(cloudflare): Instrument Cloudflare rate limiter bindings (#22035)
  • feat(core): Instrument workers-ai-provider (#22119)
  • feat(core): Rename queryParams to urlQueryParams (#22217)
  • feat(mongodb): implement orchestrion mongodb integration (#22308)
  • feat(mongoose): implement orchestrion mongoose integration (#22202)
  • feat(node): Rewrite tedious instrumentation to orchestrion tracing channels (#22238)
  • feat(nuxt): Add _experimental.useDiagnosticsChannelInjection (#22323)
  • feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • feat(replay): Allow skipping the final flush on stop() via { flush: false } (#22300)
  • feat(server-utils): Add @​opentelemetry/instrumentation-koa orchestrion integration (#22146)
  • feat(server-utils): Add orchestrion aws-sdk channel integration core (#22142)
  • feat(server-utils): Allow passing custom transforms to orchestrion (#22319)
  • feat(server-utils): Port Bedrock aws-sdk extension and add integration tests (#22166)
  • feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions (#22164)
  • feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation (#22165)
  • feat(server-utils): Rewrite SentryLangChainInstrumentation to orchestrion (#22266)
  • feat(server-utils): Rewrite SentryLangGraphInstrumentation to orchestrion (#22268)
  • feat(vue): Set navigation.route.id from the route name (#22372)
  • fix(bundler): do not import type from optional peer dep (#22304)
  • fix(cloudflare): Bind Durable Object built-in handlers (#22340)
  • fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods (#22310)
  • fix(cloudflare): Route DO teardown through original waitUntil (#22339)
  • fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries (#22376)
  • fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms (#22273)
  • fix(core): Prevent infinite recursion when console is instrumented twice (#21959)
  • fix(nextjs): Mark internal chunk frames as not in_app (#22354)
  • fix(node): Register tracer provider when OTel API global pre-exists with a different version (#22374)
  • fix(node-native): Don't drop breadcrumbs from event loop block events (#22322)
  • fix(serve-rutils): Orchestrion diagnostics for async and require (#22327)
  • fix(server-utils): Only skip loader thread (#22336)
  • fix(sveltekit): Detect SvelteKit server build via Vite Environment API (#21629)
  • fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode (#22293)
  • fix(vue): Support pinia 4 in peer dependency range (#22324)
  • chore: Add external contributor to CHANGELOG.md (#22357)

... (truncated)

Commits
  • a88e286 release: 10.67.0
  • db27830 Merge pull request #22382 from getsentry/prepare-release/10.67.0
  • 3c20967 meta(changelog): Update changelog for 10.67.0
  • ee99468 feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation ...
  • 55bd48a feat(core): Instrument workers-ai-provider (#22119)
  • c47b449 chore(ci): Use openrouter keys for claude in ci (#22381)
  • 326fbc9 fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL querie...
  • 8e20a26 feat(vue): Set navigation.route.id from the route name (#22372)
  • e47e5d8 feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • 1e26f76 feat(mongodb): implement orchestrion mongodb integration (#22308)
  • Additional commits viewable in compare view

Updates @storybook/cli from 10.5.2 to 10.5.3

Release notes

Sourced from @​storybook/cli's releases.

v10.5.3

10.5.3

Changelog

Sourced from @​storybook/cli's changelog.

10.5.3

Commits
  • 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
  • b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
  • See full diff in compare view

Updates js-yaml from 5.2.0 to 5.2.1

Changelog

Sourced from js-yaml's changelog.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 4 updates: [@formatjs/intl-datetimeformat](https://github.com/formatjs/formatjs), [@sentry/react](https://github.com/getsentry/sentry-javascript), [@storybook/cli](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli-storybook) and [js-yaml](https://github.com/nodeca/js-yaml).


Updates `@formatjs/intl-datetimeformat` from 7.5.1 to 7.5.2
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/@formatjs/intl-datetimeformat@7.5.1...@formatjs/intl-datetimeformat@7.5.2)

Updates `@sentry/react` from 10.66.0 to 10.67.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.66.0...10.67.0)

Updates `@storybook/cli` from 10.5.2 to 10.5.3
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/lib/cli-storybook)

Updates `js-yaml` from 5.2.0 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.0...5.2.1)

---
updated-dependencies:
- dependency-name: "@formatjs/intl-datetimeformat"
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: "@sentry/react"
  dependency-version: 10.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: safe
- dependency-name: "@storybook/cli"
  dependency-version: 10.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: safe
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 22:58
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026
@dependabot
dependabot Bot requested a review from PavelJankoski July 20, 2026 22:58
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants