[sirpy]

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Allocation of Resources Without Limits or Throttling SNYK-JS-GLOB-22112102

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[sirpy]

This is a minor version upgrade for @sentry/nextjs that introduces new features and some important changes that require verification.

Key Changes:

• OpenTelemetry Compatibility: If your project uses OpenTelemetry, you must ensure you are using @opentelemetry/api versions below 1.10.0. Sentry SDK v10 is not compatible with @opentelemetry/api v1.10.0 or higher.
• Tunneling Behavior Change: The tunnelRoute option has been enhanced with a new route handler. If you use this new handler, requests will now go through your Next.js middleware. Additionally, when using tunnelRoute, requests are now sent with credentials: 'omit', which means cookies will not be included.
• New Features: The SDK now adds a page.server_rendering.type attribute to transactions for cached pages, providing better insights into performance.

Recommendation:

• Verify your project's @opentelemetry/api version if you use it alongside Sentry.
• If you use the tunnelRoute option, review your implementation to ensure it is compatible with the new credential-less requests and middleware processing.

Source: Sentry JavaScript SDK Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.