Bump the frontend group with 3 updates #615

dependabot · 2025-10-01T06:18:20Z

Bumps the frontend group with 3 updates: @sentry/browser, caniuse-lite and webpack.

Updates @sentry/browser from 10.13.0 to 10.17.0

Release notes

Sourced from @sentry/browser's releases.

10.17.0

Important Changes

feat(nuxt): Implement server middleware instrumentation ([#17796](https://redirect.github.com/feat(nuxt): Implement server middleware instrumentation getsentry/sentry-javascript#17796))

This release introduces instrumentation for Nuxt middleware, ensuring that all middleware handlers are automatically wrapped with tracing and error reporting functionality.

fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default ([#17817](https://redirect.github.com/fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default getsentry/sentry-javascript#17817))

The default setting for useLayerExtension now considers the http_proxy environment variable. When http_proxy is set, useLayerExtension will be off by default. If you use a http_proxy but would still like to make use of the Sentry Lambda extension, exempt localhost in a no_proxy environment variable.

Other Changes

feat(node): Split up http integration into composable parts ([#17524](https://redirect.github.com/feat(node): Split up http integration into composable parts getsentry/sentry-javascript#17524))

fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans ([#17811](https://redirect.github.com/fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans getsentry/sentry-javascript#17811))

doc(core): Fix outdated JSDoc in beforeSendSpan ([#17815](https://redirect.github.com/doc(core): Fix outdated JSDoc in beforeSendSpan getsentry/sentry-javascript#17815))

ci: Do not run dependabot on e2e test applications ([#17813](https://redirect.github.com/ci: Do not run dependabot on e2e test applications getsentry/sentry-javascript#17813))

docs: Reword changelog for google gen ai integration ([#17805](https://redirect.github.com/docs: Reword changelog for google gen ai integration getsentry/sentry-javascript#17805))

Bundle size 📦

Path Size

@sentry/browser 23.67 KB

@sentry/browser - with treeshaking flags 22.21 KB

@sentry/browser (incl. Tracing) 39.48 KB

@sentry/browser (incl. Tracing, Replay) 76.96 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 66.85 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 81.52 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 93.43 KB

@sentry/browser (incl. Feedback) 39.99 KB

@sentry/browser (incl. sendFeedback) 28.21 KB

@sentry/browser (incl. FeedbackAsync) 33.03 KB

@sentry/react 25.35 KB

@sentry/react (incl. Tracing) 41.4 KB

@sentry/vue 28.07 KB

@sentry/vue (incl. Tracing) 41.24 KB

@sentry/svelte 23.69 KB

CDN Bundle 25.15 KB

CDN Bundle (incl. Tracing) 39.37 KB

CDN Bundle (incl. Tracing, Replay) 74.76 KB

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

10.17.0

Important Changes

feat(nuxt): Implement server middleware instrumentation ([#17796](https://redirect.github.com/feat(nuxt): Implement server middleware instrumentation getsentry/sentry-javascript#17796))

This release introduces instrumentation for Nuxt middleware, ensuring that all middleware handlers are automatically wrapped with tracing and error reporting functionality.

fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default ([#17817](https://redirect.github.com/fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default getsentry/sentry-javascript#17817))

The default setting for useLayerExtension now considers the http_proxy environment variable. When http_proxy is set, useLayerExtension will be off by default. If you use a http_proxy but would still like to make use of the Sentry Lambda extension, exempt localhost in a no_proxy environment variable.

Other Changes

feat(node): Split up http integration into composable parts ([#17524](https://redirect.github.com/feat(node): Split up http integration into composable parts getsentry/sentry-javascript#17524))

fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans ([#17811](https://redirect.github.com/fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans getsentry/sentry-javascript#17811))

doc(core): Fix outdated JSDoc in beforeSendSpan ([#17815](https://redirect.github.com/doc(core): Fix outdated JSDoc in beforeSendSpan getsentry/sentry-javascript#17815))

ci: Do not run dependabot on e2e test applications ([#17813](https://redirect.github.com/ci: Do not run dependabot on e2e test applications getsentry/sentry-javascript#17813))

docs: Reword changelog for google gen ai integration ([#17805](https://redirect.github.com/docs: Reword changelog for google gen ai integration getsentry/sentry-javascript#17805))

10.16.0

feat(logs): Add internal replay_is_buffering flag ([#17752](https://redirect.github.com/feat(logs): Add internal replay_is_buffering flag getsentry/sentry-javascript#17752))

feat(react-router): Update loadContext type to be compatible with middleware ([#17758](https://redirect.github.com/feat(react-router): Update loadContext type to be compatible with middleware getsentry/sentry-javascript#17758))

feat(replay/logs): Only attach sampled replay Ids to logs ([#17750](https://redirect.github.com/feat(replay/logs): Only attach sampled replay Ids to logs getsentry/sentry-javascript#17750))

fix(browser): Use current start timestamp for CLS span when CLS is 0 ([#17800](https://redirect.github.com/fix(browser): Use current start timestamp for CLS span when CLS is 0 getsentry/sentry-javascript#17800))

fix(core): Prevent instrumentAnthropicAiClient breaking MessageStream api ([#17754](https://redirect.github.com/fix(core): Prevent instrumentAnthropicAiClient breaking MessageStream api getsentry/sentry-javascript#17754))

fix(nextjs): Don't use chalk in turbopack config file ([#17806](https://redirect.github.com/fix(nextjs): Don't use chalk in turbopack config file getsentry/sentry-javascript#17806))

fix(react): Do not send additional navigation span on pageload ([#17799](https://redirect.github.com/fix(react): Do not send additional navigation span on pageload getsentry/sentry-javascript#17799))

build(aws): Ensure AWS build cache does not keep old files ([#17776](https://redirect.github.com/build(aws): Ensure AWS build cache does not keep old files getsentry/sentry-javascript#17776))

chore: Add publish_release command ([#17797](https://redirect.github.com/chore: Add publish_release command getsentry/sentry-javascript#17797))

ref(aws-serverless): Add resolution for import-in-the-middle when building the Lambda layer ([#17780](https://redirect.github.com/ref(aws-serverless): Ensure all import-in-the-middle code is added to the Lambda layer getsentry/sentry-javascript#17780))

ref(aws-serverless): Improve README with better examples ([#17787](https://redirect.github.com/ref(aws-serverless): Improve README with better examples getsentry/sentry-javascript#17787))

ref(core): Improve promise buffer ([#17788](https://redirect.github.com/ref(core): Improve promise buffer getsentry/sentry-javascript#17788))

Revert "test(e2e): Pin [email protected] due to @vercel/nft incompatibility ([#17777](https://redirect.github.com/test(e2e): Pin [email protected] due to @vercel/nft incompatibility getsentry/sentry-javascript#17777))" ([#17784](https://redirect.github.com/Revert "test(e2e): Pin [email protected] due to @vercel/nft incompatibility (#17777)" getsentry/sentry-javascript#17784))

test(e2e): Pin [email protected] due to @vercel/nft incompatibility ([#17777](https://redirect.github.com/test(e2e): Pin [email protected] due to @vercel/nft incompatibility getsentry/sentry-javascript#17777))

test(nextjs): Add route handler tests for turbopack ([#17515](https://redirect.github.com/test(nextjs): Add route handler tests for turbopack getsentry/sentry-javascript#17515))

... (truncated)

Commits

eb6e294 release: 10.17.0
7dd3a82 Merge pull request [#17827](https://redirect.github.com/meta(changelog): Update changelog for 10.17.0 getsentry/sentry-javascript#17827) from getsentry/prepare-release/10.17.0
7b7ba0d meta(changelog): Update changelog for 10.17.0
264ad0b feat(nuxt): Implement server middleware instrumentation ([#17796](https://redirect.github.com/feat(nuxt): Implement server middleware instrumentation getsentry/sentry-javascript#17796))
11ea830 fix(aws-serverless): Take http_proxy into account when choosing `useLayerEx...
e966cdc doc(core): Fix outdated JSDoc in beforeSendSpan ([#17815](https://redirect.github.com/doc(core): Fix outdated JSDoc in beforeSendSpan getsentry/sentry-javascript#17815))
7b40a95 feat(node): Split up http integration into composable parts ([#17524](https://redirect.github.com/feat(node): Split up http integration into composable parts getsentry/sentry-javascript#17524))
4a9946c ci: Do not run dependabot on e2e test applications ([#17813](https://redirect.github.com/ci: Do not run dependabot on e2e test applications getsentry/sentry-javascript#17813))
68a4eb3 Merge pull request [#17812](https://redirect.github.com/[Gitflow] Merge master into develop getsentry/sentry-javascript#17812) from getsentry/master
559d8a5 Merge branch 'release/10.16.0'
Additional commits viewable in [compare view](https://github.com/getsentry/sentry-javascript/compare/10.13.0...10.17.0)

Updates caniuse-lite from 1.0.30001743 to 1.0.30001746

Commits

ede44c1 Update caniuse-db 1.0.30001746
ae4ed42 Update caniuse-db 1.0.30001745
e908a86 Update caniuse-db 1.0.30001743
4e39b98 Fix auto-publish
9963f45 Improve log error detection
See full diff in [compare view](https://github.com/browserslist/caniuse-lite/compare/1.0.30001743...1.0.30001746)

Updates webpack from 5.101.3 to 5.102.0

Release notes

Sourced from [webpack's releases](https://github.com/webpack/webpack/releases).

v5.102.0

Features

Added static analyze for dynamic imports

Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at [example](https://github.com/webpack/webpack/tree/main/examples/asset))

Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at [example](https://github.com/webpack/webpack/tree/main/examples/asset))

Added the snapshot.contextModule to configure snapshots options for context modules

Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at [example](https://github.com/webpack/webpack/tree/main/examples/source-mapping-url))

The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)

The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)

Added function matcher support in rule options

Fixes

Fixed conflicts caused by multiple concatenate modules

Ignore import failure during HMR update with ES modules output

Keep render module order consistent

Prevent inlining modules that have this exports

Removed unused timeout attribute of script tag

Supported UMD chunk format to work in web workers

Improved CommonJs bundle to ES module library

Use es-lexer for mjs files for build dependencies

Fixed support *non_webpack_require* for ES modules

Properly handle external modules for CSS

AssetsByChunkName included assets from chunk.auxiliaryFiles

Use createRequire only when output is ES module and target is node

Typescript types

Performance Improvements

Avoid extra calls for snapshot

A avoid extra jobs for build dependencies

Move import attributes to own dependencies

Commits

14c813a chore(release): 5.102.0
761b153 feat: support function matcher in rule options ([#19952](https://redirect.github.com/feat: support function matcher in rule options webpack/webpack#19952))
8c0fa9e feat: tree shaking nested exports for destructuring assignment ([#19955](https://redirect.github.com/feat: tree shaking nested exports for destructuring assignment webpack/webpack#19955))
0a58530 chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 ([#19958](https://redirect.github.com/chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 webpack/webpack#19958))
042bf86 fix: integrity in http-url test ([#19954](https://redirect.github.com/fix: integrity in http-url test webpack/webpack#19954))
d9121b3 docs: use markdown instead html ([#19938](https://redirect.github.com/docs: use markdown instead html webpack/webpack#19938))
3f00777 docs: remove unused files ([#19937](https://redirect.github.com/docs: remove unused files webpack/webpack#19937))
3cf0d95 chore: add lfx badge ([#19934](https://redirect.github.com/chore: add lfx badge webpack/webpack#19934))
84e5c12 fix: should analyze correct variable for dynamic import ([#19936](https://redirect.github.com/fix: should analyze correct variable for dynamic import webpack/webpack#19936))
44cf16f docs: Revise security policy and reporting guidelines ([#19886](https://redirect.github.com/docs: Revise security policy and reporting guidelines webpack/webpack#19886))
Additional commits viewable in [compare view](https://github.com/webpack/webpack/compare/v5.101.3...v5.102.0)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

┆Issue is synchronized with this Jira Task
┆Priority: P2
┆Sprint: Backlog

Bumps the frontend group with 3 updates: [@sentry/browser](https://github.com/getsentry/sentry-javascript), [caniuse-lite](https://github.com/browserslist/caniuse-lite) and [webpack](https://github.com/webpack/webpack). Updates `@sentry/browser` from 10.13.0 to 10.17.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.13.0...10.17.0) Updates `caniuse-lite` from 1.0.30001743 to 1.0.30001746 - [Commits](browserslist/caniuse-lite@1.0.30001743...1.0.30001746) Updates `webpack` from 5.101.3 to 5.102.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.101.3...v5.102.0) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 10.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: caniuse-lite dependency-version: 1.0.30001746 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: webpack dependency-version: 5.102.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend ... Signed-off-by: dependabot[bot] <[email protected]>

maureenlholland

r+ 🟢 local integration test run

dependabot bot added dependencies Pull requests that update a dependency file. Label is automatically selected by dependabot Frontend HTML, CSS, JS... client side stuff labels Oct 1, 2025

maureenlholland self-assigned this Oct 15, 2025

maureenlholland temporarily deployed to build October 20, 2025 14:23 — with GitHub Actions Inactive

maureenlholland temporarily deployed to build October 20, 2025 14:25 — with GitHub Actions Inactive

maureenlholland temporarily deployed to build October 20, 2025 15:11 — with GitHub Actions Inactive

maureenlholland temporarily deployed to build October 20, 2025 15:13 — with GitHub Actions Inactive

maureenlholland approved these changes Oct 20, 2025

View reviewed changes

maureenlholland merged commit 7715f5a into main Oct 20, 2025
8 checks passed

maureenlholland deleted the dependabot/npm_and_yarn/frontend-550f2cc0e3 branch October 20, 2025 15:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the frontend group with 3 updates #615

Bump the frontend group with 3 updates #615

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025 •

edited by data-sync-user

Loading

Uh oh!

maureenlholland left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Path	Size
`@sentry/browser`	23.67 KB
`@sentry/browser` - with treeshaking flags	22.21 KB
`@sentry/browser` (incl. Tracing)	39.48 KB
`@sentry/browser` (incl. Tracing, Replay)	76.96 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	66.85 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	81.52 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	93.43 KB
`@sentry/browser` (incl. Feedback)	39.99 KB
`@sentry/browser` (incl. sendFeedback)	28.21 KB
`@sentry/browser` (incl. FeedbackAsync)	33.03 KB
`@sentry/react`	25.35 KB
`@sentry/react` (incl. Tracing)	41.4 KB
`@sentry/vue`	28.07 KB
`@sentry/vue` (incl. Tracing)	41.24 KB
`@sentry/svelte`	23.69 KB
CDN Bundle	25.15 KB
CDN Bundle (incl. Tracing)	39.37 KB
CDN Bundle (incl. Tracing, Replay)	74.76 KB

Bump the frontend group with 3 updates #615

Bump the frontend group with 3 updates #615

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025 • edited by data-sync-user Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.17.0

Important Changes

Other Changes

Bundle size 📦

10.17.0

Important Changes

Other Changes

10.16.0

v5.102.0

Features

Fixes

Performance Improvements

Uh oh!

maureenlholland left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Oct 1, 2025 •

edited by data-sync-user

Loading