Bump the javascript-dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the javascript-dependencies group with 12 updates in the / directory:

Package	From	To
@sentry/nextjs	10.0.0	10.17.0
@types/node	24.1.0	24.6.1
axios	1.12.0	1.12.2
eslint	9.32.0	9.36.0
eslint-config-next	15.4.5	15.5.4
next	15.4.7	15.5.4
react	19.1.1	19.2.0
@types/react	19.1.9	19.2.0
react-dom	19.1.1	19.2.0
@types/react-dom	19.1.7	19.2.0
typescript	5.9.2	5.9.3
@tailwindcss/postcss	4.1.11	4.1.14

Updates @sentry/nextjs from 10.0.0 to 10.17.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.17.0

Important Changes

• feat(nuxt): Implement server middleware instrumentation (#17796)

  This release introduces instrumentation for Nuxt middleware, ensuring that all middleware handlers are automatically wrapped with tracing and error reporting functionality.

• fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default (#17817)

  The default setting for useLayerExtension now considers the http_proxy environment variable. When http_proxy is set, useLayerExtension will be off by default. If you use a http_proxy but would still like to make use of the Sentry Lambda extension, exempt localhost in a no_proxy environment variable.

Other Changes

• feat(node): Split up http integration into composable parts (#17524)
• fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans (#17811)
• doc(core): Fix outdated JSDoc in beforeSendSpan (#17815)

• ci: Do not run dependabot on e2e test applications (#17813)
• docs: Reword changelog for google gen ai integration (#17805)

Bundle size 📦

Path	Size
@​sentry/browser	23.67 KB
@​sentry/browser - with treeshaking flags	22.21 KB
@​sentry/browser (incl. Tracing)	39.48 KB
@​sentry/browser (incl. Tracing, Replay)	76.96 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	66.85 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	81.52 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	93.43 KB
@​sentry/browser (incl. Feedback)	39.99 KB
@​sentry/browser (incl. sendFeedback)	28.21 KB
@​sentry/browser (incl. FeedbackAsync)	33.03 KB
@​sentry/react	25.35 KB
@​sentry/react (incl. Tracing)	41.4 KB
@​sentry/vue	28.07 KB
@​sentry/vue (incl. Tracing)	41.24 KB
@​sentry/svelte	23.69 KB
CDN Bundle	25.15 KB
CDN Bundle (incl. Tracing)	39.37 KB
CDN Bundle (incl. Tracing, Replay)	74.76 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.17.0

Important Changes

• feat(nuxt): Implement server middleware instrumentation (#17796)

  This release introduces instrumentation for Nuxt middleware, ensuring that all middleware handlers are automatically wrapped with tracing and error reporting functionality.

• fix(aws-serverless): Take http_proxy into account when choosing useLayerExtension default (#17817)

  The default setting for useLayerExtension now considers the http_proxy environment variable. When http_proxy is set, useLayerExtension will be off by default. If you use a http_proxy but would still like to make use of the Sentry Lambda extension, exempt localhost in a no_proxy environment variable.

Other Changes

• feat(node): Split up http integration into composable parts (#17524)
• fix(core): Remove check and always respect ai.telemetry.functionId for Vercel AI gen spans (#17811)
• doc(core): Fix outdated JSDoc in beforeSendSpan (#17815)

• ci: Do not run dependabot on e2e test applications (#17813)
• docs: Reword changelog for google gen ai integration (#17805)

10.16.0

• feat(logs): Add internal replay_is_buffering flag (#17752)
• feat(react-router): Update loadContext type to be compatible with middleware (#17758)
• feat(replay/logs): Only attach sampled replay Ids to logs (#17750)
• fix(browser): Use current start timestamp for CLS span when CLS is 0 (#17800)
• fix(core): Prevent instrumentAnthropicAiClient breaking MessageStream api (#17754)
• fix(nextjs): Don't use chalk in turbopack config file (#17806)
• fix(react): Do not send additional navigation span on pageload (#17799)

• build(aws): Ensure AWS build cache does not keep old files (#17776)
• chore: Add publish_release command (#17797)
• ref(aws-serverless): Add resolution for import-in-the-middle when building the Lambda layer (#17780)
• ref(aws-serverless): Improve README with better examples (#17787)
• ref(core): Improve promise buffer (#17788)
• Revert "test(e2e): Pin import-in-the-middle@1.14.2 due to @vercel/nft incompatibility (#17777)" (#17784)
• test(e2e): Pin import-in-the-middle@1.14.2 due to @vercel/nft incompatibility (#17777)
• test(nextjs): Add route handler tests for turbopack (#17515)

... (truncated)

Commits

• eb6e294 release: 10.17.0
• 7dd3a82 Merge pull request #17827 from getsentry/prepare-release/10.17.0
• 7b7ba0d meta(changelog): Update changelog for 10.17.0
• 264ad0b feat(nuxt): Implement server middleware instrumentation (#17796)
• 11ea830 fix(aws-serverless): Take http_proxy into account when choosing `useLayerEx...
• e966cdc doc(core): Fix outdated JSDoc in beforeSendSpan (#17815)
• 7b40a95 feat(node): Split up http integration into composable parts (#17524)
• 4a9946c ci: Do not run dependabot on e2e test applications (#17813)
• 68a4eb3 Merge pull request #17812 from getsentry/master
• 559d8a5 Merge branch 'release/10.16.0'
• Additional commits viewable in compare view

Updates @types/node from 24.1.0 to 24.6.1

Commits

• See full diff in compare view

Updates axios from 1.12.0 to 1.12.2

Release notes

Sourced from axios's releases.

Release v1.12.2

Release notes:

Bug Fixes

• fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#7030) (cf78825)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi

Release v1.12.1

Release notes:

Bug Fixes

• types: fixed env config types; (#7020) (b5f26b7)

Contributors to this release

• Dmitriy Mozgovoy

Changelog

Sourced from axios's changelog.

1.12.2 (2025-09-14)

Bug Fixes

• fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#7030) (cf78825)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi

1.12.1 (2025-09-12)

Bug Fixes

• types: fixed env config types; (#7020) (b5f26b7)

Contributors to this release

• Dmitriy Mozgovoy

Commits

• e5a3336 chore(release): v1.12.2 (#7031)
• 38726c7 refactor: change if in else to else if (#7028)
• cf78825 fix(fetch): use current global fetch instead of cached one when env fetch is ...
• c26d00f refactor: remove redundant assignment (#7029)
• 9fb41a8 chore(ci): add local HTTP server for Karma tests; (#7022)
• 19f9f36 docs(readme): add custom fetch section; (#7024)
• 3cac78c chore(release): v1.12.1 (#7021)
• b5f26b7 fix(types): fixed env config types; (#7020)
• See full diff in compare view

Updates eslint from 9.32.0 to 9.36.0

Release notes

Sourced from eslint's releases.

v9.36.0

Features

• 47afcf6 feat: correct preserve-caught-error edge cases (#20109) (Francesco Trotta)

Bug Fixes

• 75b74d8 fix: add missing rule option types (#20127) (ntnyq)
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116) (루밀LuMir)
• 7d61b7f fix: add missing scope types to Scope.type (#20110) (Pixel998)
• 7a670c3 fix: correct rule option typings in rules.d.ts (#20084) (Pixel998)

Documentation

• b73ab12 docs: update examples to use defineConfig (#20131) (sethamus)
• 31d9392 docs: fix typos (#20118) (Pixel998)
• c7f861b docs: Update README (GitHub Actions Bot)
• 6b0c08b docs: Update README (GitHub Actions Bot)
• 91f97c5 docs: Update README (GitHub Actions Bot)

Chores

• 12411e8 chore: upgrade @​eslint/js@​9.36.0 (#20139) (Milos Djermanovic)
• 488cba6 chore: package.json update for @​eslint/js release (Jenkins)
• bac82a2 ci: simplify renovate configuration (#19907) (唯然)
• c00bb37 ci: bump actions/labeler from 5 to 6 (#20090) (dependabot[bot])
• fee751d refactor: use defaultOptions in rules (#20121) (Pixel998)
• 1ace67d chore: update example to use defineConfig (#20111) (루밀LuMir)
• 4821963 test: add missing loc information to error objects in rule tests (#20112) (루밀LuMir)
• b42c42e chore: disallow use of deprecated type property in core rule tests (#20094) (Milos Djermanovic)
• 7bb498d test: remove deprecated type property from core rule tests (#20093) (Pixel998)
• e10cf2a ci: bump actions/setup-node from 4 to 5 (#20089) (dependabot[bot])
• 5cb0ce4 refactor: use meta.defaultOptions in preserve-caught-error (#20080) (Pixel998)
• f9f7cb5 chore: package.json update for eslint-config-eslint release (Jenkins)
• 81764b2 chore: update eslint peer dependency in eslint-config-eslint (#20079) (Milos Djermanovic)

v9.35.0

Features

• 42761fa feat: implement suggestions for no-empty-function (#20057) (jaymarvelz)
• 102f444 feat: implement suggestions for no-empty-static-block (#20056) (jaymarvelz)
• e51ffff feat: add preserve-caught-error rule (#19913) (Amnish Singh Arora)

Bug Fixes

• 10e7ae2 fix: update uncloneable options error message (#20059) (soda-sorcery)
• bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#20045) (jaymarvelz)
• dfd11de fix: add before and after to test case types (#20049) (Francesco Trotta)
• dabbe95 fix: correct types for no-restricted-imports rule (#20034) (Milos Djermanovic)
• ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#20032) (sethamus)

Documentation

• d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#20074) (jjangga0214)
• a355a0e docs: invert comparison logic for example in no-var doc page (#20064) (OTonGitHub)
• 5082fc2 docs: Update README (GitHub Actions Bot)
• 99cfd7e docs: add missing "the" in rule deprecation docs (#20050) (Josh Goldberg ✨)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.36.0 - September 19, 2025

• 12411e8 chore: upgrade @​eslint/js@​9.36.0 (#20139) (Milos Djermanovic)
• 488cba6 chore: package.json update for @​eslint/js release (Jenkins)
• b73ab12 docs: update examples to use defineConfig (#20131) (sethamus)
• 47afcf6 feat: correct preserve-caught-error edge cases (#20109) (Francesco Trotta)
• 75b74d8 fix: add missing rule option types (#20127) (ntnyq)
• bac82a2 ci: simplify renovate configuration (#19907) (唯然)
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116) (루밀LuMir)
• c00bb37 ci: bump actions/labeler from 5 to 6 (#20090) (dependabot[bot])
• fee751d refactor: use defaultOptions in rules (#20121) (Pixel998)
• 31d9392 docs: fix typos (#20118) (Pixel998)
• 7d61b7f fix: add missing scope types to Scope.type (#20110) (Pixel998)
• 1ace67d chore: update example to use defineConfig (#20111) (루밀LuMir)
• 4821963 test: add missing loc information to error objects in rule tests (#20112) (루밀LuMir)
• c7f861b docs: Update README (GitHub Actions Bot)
• 6b0c08b docs: Update README (GitHub Actions Bot)
• 7a670c3 fix: correct rule option typings in rules.d.ts (#20084) (Pixel998)
• b42c42e chore: disallow use of deprecated type property in core rule tests (#20094) (Milos Djermanovic)
• 7bb498d test: remove deprecated type property from core rule tests (#20093) (Pixel998)
• 91f97c5 docs: Update README (GitHub Actions Bot)
• e10cf2a ci: bump actions/setup-node from 4 to 5 (#20089) (dependabot[bot])
• 5cb0ce4 refactor: use meta.defaultOptions in preserve-caught-error (#20080) (Pixel998)
• f9f7cb5 chore: package.json update for eslint-config-eslint release (Jenkins)
• 81764b2 chore: update eslint peer dependency in eslint-config-eslint (#20079) (Milos Djermanovic)

v9.35.0 - September 5, 2025

• da87f2f chore: upgrade @​eslint/js@​9.35.0 (#20077) (Milos Djermanovic)
• af2a087 chore: package.json update for @​eslint/js release (Jenkins)
• d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#20074) (jjangga0214)
• 7055764 test: remove tests/lib/eslint/eslint.config.js (#20065) (Milos Djermanovic)
• 10e7ae2 fix: update uncloneable options error message (#20059) (soda-sorcery)
• 42761fa feat: implement suggestions for no-empty-function (#20057) (jaymarvelz)
• 102f444 feat: implement suggestions for no-empty-static-block (#20056) (jaymarvelz)
• 84ffb96 chore: update @eslint-community/eslint-utils (#20069) (Francesco Trotta)
• a355a0e docs: invert comparison logic for example in no-var doc page (#20064) (OTonGitHub)
• e51ffff feat: add preserve-caught-error rule (#19913) (Amnish Singh Arora)
• 5082fc2 docs: Update README (GitHub Actions Bot)
• d5ef939 refactor: remove deprecated context.parserOptions usage across rules (#20060) (sethamus)
• 1b3881d chore: remove redundant word (#20058) (pxwanglu)
• 99cfd7e docs: add missing "the" in rule deprecation docs (#20050) (Josh Goldberg ✨)
• bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#20045) (jaymarvelz)
• dfd11de fix: add before and after to test case types (#20049) (Francesco Trotta)
• 6ad8973 docs: update --no-ignore and --ignore-pattern documentation (#20036) (Francesco Trotta)
• dabbe95 fix: correct types for no-restricted-imports rule (#20034) (Milos Djermanovic)
• 8033b19 docs: add documentation for --no-config-lookup (#20033) (Francesco Trotta)
• ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#20032) (sethamus)

v9.34.0 - August 22, 2025

... (truncated)

Commits

• b4857e5 9.36.0
• 5878a42 Build: changelog update for 9.36.0
• 12411e8 chore: upgrade @​eslint/js@​9.36.0 (#20139)
• 488cba6 chore: package.json update for @​eslint/js release
• b73ab12 docs: update examples to use defineConfig (#20131)
• 47afcf6 feat: correct preserve-caught-error edge cases (#20109)
• 75b74d8 fix: add missing rule option types (#20127)
• bac82a2 ci: simplify renovate configuration (#19907)
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116)
• c00bb37 ci: bump actions/labeler from 5 to 6 (#20090)
• Additional commits viewable in compare view

Updates eslint-config-next from 15.4.5 to 15.5.4

Release notes

Sourced from eslint-config-next's releases.

v15.5.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: ensure onRequestError is invoked when otel enabled (#83343)
• fix: devtools initial position should be from next config (#83571)
• [devtool] fix overlay styles are missing (#83721)
• Turbopack: don't match dynamic pattern for node_modules packages (#83176)
• Turbopack: don't treat metadata routes as RSC (#82911)
• [turbopack] Improve handling of symlink resolution errors in track_glob and read_glob (#83357)
• Turbopack: throw large static metadata error earlier (#82939)
• fix: error overlay not closing when backdrop clicked (#83981)
• Turbopack: flush Node.js worker IPC on error (#84077)

Misc Changes

• [CNA] use linter preference (#83194)
• CI: use KV for test timing data (#83745)
• docs: september improvements and fixes (#83997)

Credits

Huge thanks to @​yiminghe, @​huozhi, @​devjiwonchoi, @​mischnic, @​lukesandberg, @​ztanner, @​icyJoseph, @​leerob, @​fufuShih, @​dwrth, @​aymericzip, @​obendev, @​molebox, @​OoMNoO, @​pontasan, @​styfle, @​HondaYt, @​ryuapp, @​lpalmes, and @​ijjk for helping!

v15.5.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: validation return types of pages API routes (#83069)
• fix: relative paths in dev in validator.ts (#83073)
• fix: remove satisfies keyword from type validation to preserve old TS compatibility (#83071)

Credits

Huge thanks to @​bgub for helping!

v15.5.2

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: disable unknownatrules lint rule entirely (#83059)
• revert: add ?dpl to fonts in /_next/static/media (#83062)

Credits

... (truncated)

Commits

• 40f1d78 v15.5.4
• 07d1cbc v15.5.3
• 497ec6a v15.5.2
• cc68ced v15.5.1
• 7e08c82 v15.5.0
• 8f6d345 v15.4.2-canary.56
• e3e2197 v15.4.2-canary.55
• a745826 v15.4.2-canary.54
• bec38ef v15.4.2-canary.53
• 97dbf5f v15.4.2-canary.52
• Additional commits viewable in compare view

Updates next from 15.4.7 to 15.5.4

Release notes

Sourced from next's releases.

v15.5.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: ensure onRequestError is invoked when otel enabled (#83343)
• fix: devtools initial position should be from next config (#83571)
• [devtool] fix overlay styles are missing (#83721)
• Turbopack: don't match dynamic pattern for node_modules packages (#83176)
• Turbopack: don't treat metadata routes as RSC (#82911)
• [turbopack] Improve handling of symlink resolution errors in track_glob and read_glob (#83357)
• Turbopack: throw large static metadata error earlier (#82939)
• fix: error overlay not closing when backdrop clicked (#83981)
• Turbopack: flush Node.js worker IPC on error (#84077)

Misc Changes

• [CNA] use linter preference (#83194)
• CI: use KV for test timing data (#83745)
• docs: september improvements and fixes (#83997)

Credits

Huge thanks to @​yiminghe, @​huozhi, @​devjiwonchoi, @​mischnic, @​lukesandberg, @​ztanner, @​icyJoseph, @​leerob, @​fufuShih, @​dwrth, @​aymericzip, @​obendev, @​molebox, @​OoMNoO, @​pontasan, @​styfle, @​HondaYt, @​ryuapp, @​lpalmes, and @​ijjk for helping!

v15.5.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: validation return types of pages API routes (#83069)
• fix: relative paths in dev in validator.ts (#83073)
• fix: remove satisfies keyword from type validation to preserve old TS compatibility (#83071)

Credits

Huge thanks to @​bgub for helping!

v15.5.2

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: disable unknownatrules lint rule entirely (#83059)
• revert: add ?dpl to fonts in /_next/static/media (#83062)

Credits

... (truncated)

Commits

• 40f1d78 v15.5.4
• cb30f0a [backport] docs: september improvements and fixes (#83997)
• b6a32bb [backport] [CNA] use linter preference (#83194) (#84087)
• 26d61f1 [backport] Turbopack: flush Node.js worker IPC on error (#84079)
• e11e87a [backport] fix: error overlay not closing when backdrop clicked (#83981) (#83...
• 0a29888 [backport] fix: devtools initial position should be from next config (#83571)...
• 7a53950 [backport] Turbopack: don't treat metadata routes as RSC (#83804)
• 050bdf1 [backport] Turbopack: throw large static metadata error earlier (#83816)
• 1f6ea09 [backport] Turbopack: Improve handling of symlink resolution errors (#83805)
• c7d1855 [backport] CI: use KV for test timing data (#83860)
• Additional commits viewable in compare view

Updates react from 19.1.1 to 19.2.0

Release notes

Sourced from react's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

• <Activity>: A new API to hide and restore the UI and internal state of its children.
• useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
• cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
• React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

• Added resume APIs for partial pre-rendering with Web Streams:
  • resume: to resume a prerender to a stream.
  • resumeAndPrerender: to resume a prerender to HTML.
• Added resume APIs for partial pre-rendering with Node Streams:
  • resumeToPipeableStream: to resume a prerender to a stream.
  • resumeAndPrerenderToNodeStream: to resume a prerender to HTML.
• Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

• React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
• Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
• Use underscore instead of : IDs generated by useId

All Changes

React

• <Activity /> was developed over many years, starting before ClassComponent.setState (@​acdlite @​sebmarkbage and many others)
• Stringify context as "SomeContext" instead of "SomeContext.Provider" (@​kassens #33507)
• Include stack of cause of React instrumentation errors with %o placeholder (@​eps1lon #34198)
• Fix infinite useDeferredValue loop in popstate event (@​acdlite #32821)
• Fix a bug when an initial value was passed to useDeferredValue (@​acdlite #34376)
• Fix a crash when submitting forms with Client Actions (@​sebmarkbage #33055)
• Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@​sebmarkbage #32900)
• Avoid stack overflow on wide trees during Hot Reload (@​sophiebits #34145)
• Improve Owner and Component stacks in various places (@​sebmarkbage, @​eps1lon: #33629, #33724, #32735, #33723)
• Add cacheSignal (@​sebmarkbage #33557)

React DOM

• Block on Suspensey Fonts during reveal of server-side-rendered content (@​sebmarkbage #33342)
• Use underscore instead of : for IDs generated by useId (@​sebmarkbage, @​eps1lon: #32001, facebook/react#33342#33099, #33422)
• Stop warning when ARIA 1.3 attributes are used (@​Abdul-Omira #34264)
• Allow nonce to be used on hoistable styles (@​Andarist #32461)
• Warn for using a React owned node as a Container if it also has text content (@​sebmarkbage #32774)

... (truncated)

Changelog

Sourced from react's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

• <Activity>: A new API to hide and restore the UI and internal state of its children.
• useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
• cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
• React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

• Added resume APIs for partial pre-rendering with Web Streams:
  • resume: to resume a prerender to a stream.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
toolbox	Ready	Preview	Comment	Oct 1, 2025 11:06pm

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.