chore: bump the npm-all group across 1 directory with 3 updates by dependabot[bot] · Pull Request #31 · hexlet-components/devops-example-app

dependabot · 2026-10-24T14:00:19Z

Bumps the npm-all group with 3 updates in the / directory: @sentry/node, dotenv and vitest.

Updates @sentry/node from 10.76.2 to 11.8.0

Release notes

11.8.0

Important Changes

feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

Node.js 20.19.0 or higher is required.

@sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.

The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.

Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

feat(core): Support SuppressedError in LinkedErrors integration (#25246)

fix(astro): Delete generated source maps for static output (#25310)

fix(astro): Upload source maps of Astro 7's prerender build (#25309)

fix(browser): Apply urlQueryParams to the Referer header (#25324)

fix(cloudflare): auto-instrument when wrangler main is a package (#25343)

fix(hono): Expose runtime-specific SDK options (#25290)

fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)

fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)

fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)

fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)

fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)

fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)

fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

chore: Add external contributor to CHANGELOG.md (#25375)

ci: Install the pnpm version that Volta pins (#25287)

license: Add cli FSL notice to package licenses (#25314)

ref(core): use shared MCP attribute conventions (#25059)

ref(tanstackstart-react): Reuse shared component annotation options (#25313)

test(browser): Keep whitespace text out of the handlers-lcp page (#25280)

test(bun): Restore @sentry/core spies after the Bun.serve tests (#25276)

test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)

test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)

test(e2e): Add node-openai-send-to-sentry test app (#24824)

test(e2e): Add nuxt-5-sourcemaps test (#25268)

test(e2e): Inherit root Volta config in all e2e test apps (#25369)

test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)

test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#25279)

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

11.8.0

Important Changes

feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

Node.js 20.19.0 or higher is required.

@sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.

The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.

Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

feat(core): Support SuppressedError in LinkedErrors integration (#25246)

fix(astro): Delete generated source maps for static output (#25310)

fix(astro): Upload source maps of Astro 7's prerender build (#25309)

fix(browser): Apply urlQueryParams to the Referer header (#25324)

fix(cloudflare): auto-instrument when wrangler main is a package (#25343)

fix(hono): Expose runtime-specific SDK options (#25290)

fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)

fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)

fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)

fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)

fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)

fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)

fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

chore: Add external contributor to CHANGELOG.md (#25375)

ci: Install the pnpm version that Volta pins (#25287)

license: Add cli FSL notice to package licenses (#25314)

ref(core): use shared MCP attribute conventions (#25059)

ref(tanstackstart-react): Reuse shared component annotation options (#25313)

test(browser): Keep whitespace text out of the handlers-lcp page (#25280)

test(bun): Restore @sentry/core spies after the Bun.serve tests (#25276)

test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)

test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)

test(e2e): Add node-openai-send-to-sentry test app (#24824)

test(e2e): Add nuxt-5-sourcemaps test (#25268)

test(e2e): Inherit root Volta config in all e2e test apps (#25369)

test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)

test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

... (truncated)

Commits

c6492ef release: 11.8.0
e091f7f meta(changelog): Update changelog for 11.8.0 (#25388)
30ec754 meta(changelog): Update changelog for 11.8.0
a309cf8 test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
71f1ef9 test(e2e): Inherit root Volta config in all e2e test apps (#25369)
e54e577 chore: Add external contributor to CHANGELOG.md (#25375)
0ed4606 fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
9516aeb fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
7471347 feat(core): Support SuppressedError in LinkedErrors integration (#25246)
f4ae6c5 fix(browser): Apply urlQueryParams to the Referer header (#25324)
Additional commits viewable in compare view

Updates dotenv from 17.4.2 to 18.0.8

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

Fast parser should strip appended extra quotes (#1073)

Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

Treat undefined settings like quiet: true as null rather than falsey (#1070)

CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

Fix missing typescript module declaration (#1068)

Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

Handle file urls in config logging (#1054)

... (truncated)

Commits

e2fe95e 18.0.8
7aa712a type detail improvement
53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
0b4843a changelog
55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
f757811 fix(types): allow undefined values in populate output
fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
2953207 18.0.7
9944723 make more readable for undefined -> null
d455db0 Merge branch 'master' of github.com:motdotla/dotenv
Additional commits viewable in compare view

Updates vitest from 4.1.12 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

    View changes on GitHub

v5.0.4

   🚀 Features

experimental:

Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in vitest-dev/vitest#11461 (a8ea3)

Support test.ui.theme option - by @sheremet-va in vitest-dev/vitest#11499 (1da66)

Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)

Print how many tests were affected and a total when running --changed - by @sheremet-va in vitest-dev/vitest#11424 (a2336)

Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in vitest-dev/vitest#11515 (c0601)

Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in vitest-dev/vitest#11430 (30d03)

Enable fsModuleCache by default - by @sheremet-va in vitest-dev/vitest#11435 (ad208)

Track project files and mocks with --changed - by @sheremet-va in vitest-dev/vitest#11432 (b0f2b)

Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in vitest-dev/vitest#11453 (9673c)

Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)

Resolve node builtins in client environments - by @sheremet-va in vitest-dev/vitest#11417 (56b31)

Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)

Wrap module mocks during in-source testing - by @sheremet-va in vitest-dev/vitest#11505 (36d19)

Handle line endings in snapshot - by @sheremet-va in vitest-dev/vitest#11522 (4c468)

Respect root in projects - by @sheremet-va in vitest-dev/vitest#11521 (26642)

Resolve mocks in directories with spaces - by @sheremet-va in vitest-dev/vitest#11539 (caaef)

api:

Publish the api token atomically - by @umairnawaz333 in vitest-dev/vitest#11323 (6f990)

browser:

... (truncated)

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-all group with 3 updates in the / directory: [@sentry/node](https://github.com/getsentry/sentry-javascript), [dotenv](https://github.com/motdotla/dotenv) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@sentry/node` from 10.76.2 to 11.8.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.76.2...11.8.0) Updates `dotenv` from 17.4.2 to 18.0.8 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.2...v18.0.8) Updates `vitest` from 4.1.12 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-version: 11.8.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-all - dependency-name: dotenv dependency-version: 18.0.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-all - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-24T14:00:23Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

mokevnin · 2026-10-24T18:05:09Z

@dependabot rebase

mokevnin · 2026-10-24T18:08:08Z

Закрыто: зависимости и версии actions в этом репозитории обновляются вручную, отдельным проходом по организации.

dependabot · 2026-10-24T18:08:13Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026

mokevnin closed this Oct 24, 2026

mokevnin deleted the dependabot/npm_and_yarn/npm-all-abadc0e600 branch October 24, 2026 18:08

Navigation Menu

Repository navigation

chore: bump the npm-all group across 1 directory with 3 updates - #31

chore: bump the npm-all group across 1 directory with 3 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-all-abadc0e600

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

mokevnin commented Oct 24, 2026

Uh oh!

mokevnin commented Oct 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 24, 2026

11.8.0

Important Changes

Other Changes

11.8.0

Important Changes

Other Changes

18.0.8 (2026-10-14)

Changed

18.0.7 (2026-10-09)

Changed

18.0.6 (2026-10-06)

Changed

18.0.5 (2026-09-30)

Changed

18.0.4 (2026-09-25)

Changed

18.0.3 (2026-09-22)

Changed

18.0.2 (2026-09-21)

Changed

18.0.1 (2026-09-18)

Changed

v5.0.5

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🚀 Features

🐞 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Labels

Uh oh!

mokevnin commented Oct 24, 2026

Uh oh!

mokevnin commented Oct 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant