chore(deps): bump the minor-and-patch group across 1 directory with 12 updates #41

dependabot · 2026-01-13T08:52:59Z

Bumps the minor-and-patch group with 12 updates in the / directory:

Package	From	To
@sentry/nextjs	`10.32.1`	`10.33.0`
better-sqlite3	`12.5.0`	`12.6.0`
hono	`4.11.3`	`4.11.4`
import-in-the-middle	`2.0.1`	`2.0.2`
pino	`10.1.0`	`10.1.1`
react-error-boundary	`6.0.2`	`6.0.3`
react-hook-form	`7.70.0`	`7.71.0`
@types/k6	`1.4.0`	`1.5.0`
@types/nodemailer	`7.0.4`	`7.0.5`
@types/react	`19.2.7`	`19.2.8`
bumpp	`10.3.2`	`10.4.0`
vite-tsconfig-paths	`6.0.3`	`6.0.4`

Updates @sentry/nextjs from 10.32.1 to 10.33.0

Release notes

Sourced from @sentry/nextjs's releases.

10.33.0

Important Changes
feat(core): Apply scope attributes to metrics (#18738)

You can now set attributes on the SDK's scopes which will be applied to all metrics as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.
Sentry.getGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });
Sentry.withScope(scope => {
scope.setAttribute('step', 'authentication');
// scope attributes is_admin, auth_provider and step are added
Sentry.metrics.count('clicks', 1, { attributes: { activeSince: 100 } });
Sentry.metrics.gauge('timeSinceRefresh', 4, { unit: 'hour' });
});
// scope attributes is_admin and auth_provider are added
Sentry.metrics.count('response_time', 283.33, { unit: 'millisecond' });
feat(tracing): Add Vercel AI SDK v6 support (#18741)

The Sentry SDK now supports the Vercel AI SDK v6. Tracing and error monitoring will work automatically with the new version.
feat(wasm): Add applicationKey option for third-party error filtering (#18762)

Adds support for applying an application key to WASM stack frames that can be then used in the thirdPartyErrorFilterIntegration for detection of first-party code.

Usage:
Sentry.init({
  integrations: [
    // Integration order matters: wasmIntegration needs to be before thirdPartyErrorFilterIntegration
    wasmIntegration({ applicationKey: 'your-custom-application-key' }), ←───┐
    thirdPartyErrorFilterIntegration({                                      │
      behaviour: 'drop-error-if-exclusively-contains-third-party-frames',   ├─ matching keys
      filterKeys: ['your-custom-application-key'] ←─────────────────────────┘
    }),
  ],
});
Other Changes

feat(cloudflare): Support propagateTraceparent (#18569)

feat(core): Add ignoreSentryInternalFrames option to thirdPartyErrorFilterIntegration (#18632)

feat(core): Add gen_ai.conversation.id attribute to OpenAI and LangGr… (#18703)

... (truncated)

Changelog

Sourced from @sentry/nextjs's changelog.

10.33.0

Important Changes
feat(core): Apply scope attributes to metrics (#18738)

You can now set attributes on the SDK's scopes which will be applied to all metrics as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.
Sentry.getGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });
Sentry.withScope(scope => {
scope.setAttribute('step', 'authentication');
// scope attributes is_admin, auth_provider and step are added
Sentry.metrics.count('clicks', 1, { attributes: { activeSince: 100 } });
Sentry.metrics.gauge('timeSinceRefresh', 4, { unit: 'hour' });
});
// scope attributes is_admin and auth_provider are added
Sentry.metrics.count('response_time', 283.33, { unit: 'millisecond' });
feat(tracing): Add Vercel AI SDK v6 support (#18741)

The Sentry SDK now supports the Vercel AI SDK v6. Tracing and error monitoring will work automatically with the new version.
feat(wasm): Add applicationKey option for third-party error filtering (#18762)

Adds support for applying an application key to WASM stack frames that can be then used in the thirdPartyErrorFilterIntegration for detection of first-party code.

Usage:
Sentry.init({
  integrations: [
    // Integration order matters: wasmIntegration needs to be before thirdPartyErrorFilterIntegration
    wasmIntegration({ applicationKey: 'your-custom-application-key' }), ←───┐
    thirdPartyErrorFilterIntegration({                                      │
      behaviour: 'drop-error-if-exclusively-contains-third-party-frames',   ├─ matching keys
      filterKeys: ['your-custom-application-key'] ←─────────────────────────┘
    }),
  ],
});
Other Changes

feat(cloudflare): Support propagateTraceparent (#18569)

feat(core): Add ignoreSentryInternalFrames option to thirdPartyErrorFilterIntegration (#18632)

... (truncated)

Commits

fb9dd1e release: 10.33.0
b7fe9bf Merge pull request #18770 from getsentry/prepare-release/10.33.0
1630389 meta(changelog): Update changelog for 10.33.0
3ff89c6 test(node-integration): Remove hardcoded SDK version assertions (#18775)
03546d2 test(node-core): Fix wrong import in node core IPv6 integration test (#18773)
6f723e0 fix(test): Remove hard-coded SDK version assertion (#18771)
ac45e57 feat(nextjs): Print Turbopack note for deprecated webpack options (#18769)
cc93c68 feat(cloudflare): Support propagateTraceparent (#18569)
46225eb feat(wasm): Add applicationKey option for third-party error filtering (#18762)
fd42f3b fix(next): Wrap all Random APIs with a safe runner (#18700)
Additional commits viewable in compare view

Updates better-sqlite3 from 12.5.0 to 12.6.0

Release notes

Sourced from better-sqlite3's releases.

v12.6.0

What's Changed

Update SQLite to version 3.51.2 in WiseLibs/better-sqlite3#1436

Full Changelog: WiseLibs/better-sqlite3@v12.5.0...v12.6.0

Commits

0d0d15f 12.6.0
8dccd81 Update SQLite to version 3.51.2 (#1436)
See full diff in compare view

Updates hono from 4.11.3 to 4.11.4

Release notes

Sourced from hono's releases.

v4.11.4

Security

Fixed a JWT algorithm confusion issue in the JWT and JWK/JWKS middleware.

Both middlewares now require an explicit algorithm configuration to prevent the verification algorithm from being influenced by untrusted JWT header values.

If you are using the JWT or JWK/JWKS middleware, please update to the latest version as soon as possible.

JWT middleware
import { jwt } from 'hono/jwt'
app.use(
'/auth/*',
jwt({
secret: 'it-is-very-secret',
alg: 'HS256', // required
})
)
JWK/JWKS middleware
import { jwk } from 'hono/jwk'
app.use(
'/auth/*',
jwk({
jwks_uri: 'https://example.com/.well-known/jwks.json',
alg: ['RS256'], // required (asymmetric algorithms only)
})
)
For more details, see the Security Advisory.

GHSA-f67f-6cw9-8mq4

GHSA-3vhc-576x-3qv4

What's Changed

test(utils/jwt): add missing algorithm types in jwa.test.ts by @flathill404 in honojs/hono#4607

chore: bump @hono/eslint-config and enable curly rule by @yusukebe in honojs/hono#4620

docs(bun/websocket): Fixed a typo in hono/bun deprecation message and updated test. by @Itsnotaka in honojs/hono#4618

test: support alg option for JWT middleware by @yusukebe in honojs/hono#4624

New Contributors

@flathill404 made their first contribution in honojs/hono#4607

... (truncated)

Commits

28452f0 4.11.4
190f6e2 Merge commit from fork
a48ef18 test: support alg option for JWT middleware (#4624)
cc0aa7a Merge commit from fork
ef2a4b8 docs(bun/websocket): Fixed a typo in hono/bun deprecation message and updated...
8139399 chore: bump @hono/eslint-config and enable curly rule (#4620)
4e87275 test(utils/jwt): add missing algorithm types in jwa.test.ts (#4606) (#4607)
See full diff in compare view

Updates import-in-the-middle from 2.0.1 to 2.0.2

Release notes

Sourced from import-in-the-middle's releases.

import-in-the-middle: v2.0.2

2.0.2 (2026-01-11)

Bug Fixes

grammar issue in README.md (#216) (46e4a2a)

properly handle internals when specifier matches (#220) (05e4216)

Changelog

Sourced from import-in-the-middle's changelog.

2.0.2 (2026-01-11)

Bug Fixes

grammar issue in README.md (#216) (46e4a2a)

properly handle internals when specifier matches (#220) (05e4216)

Commits

c2dafbc chore: release v2.0.2 (#218)
05e4216 fix: properly handle internals when specifier matches (#220)
c5d482f test: Make "cjs" test fixture actually commonjs (#219)
46e4a2a fix: grammar issue in README.md (#216)
See full diff in compare view

Updates pino from 10.1.0 to 10.1.1

Release notes

Sourced from pino's releases.

v10.1.1

What's Changed

fix(types): Correct conditional type handling for generic log function arguments by @samchungy in pinojs/pino#2329

perf: use JSON.stringify in fast path for node v25+ by @ronag in pinojs/pino#2330

build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in pinojs/pino#2336

build(deps-dev): bump borp from 0.20.2 to 0.21.0 by @dependabot[bot] in pinojs/pino#2337

build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by @dependabot[bot] in pinojs/pino#2338

docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by @NoobFullStack in pinojs/pino#2334

feat(browser): add reportCaller to surface user callsite by @dev-KingMaster in pinojs/pino#2340

docs: update transports.md by @marklai1998 in pinojs/pino#2224

docs: add Node.js 22+ native TypeScript type stripping support by @mcollina in pinojs/pino#2347

feat(types): use ThreadStream type from thread-stream by @CHC383 in pinojs/pino#2320

build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in pinojs/pino#2354

build(deps): update thread-stream to v4 by @mcollina in pinojs/pino#2356

fix: harden transport loading against prototype pollution by @omdxp in pinojs/pino#2358

docs: add threat model to SECURITY.md by @mcollina in pinojs/pino#2360

build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in pinojs/pino#2365

build(deps-dev): bump @types/node from 24.10.4 to 25.0.3 by @dependabot[bot] in pinojs/pino#2367

fix: allow passing string, number, null for %o placeholder by @rChaoz in pinojs/pino#2372

New Contributors

@NoobFullStack made their first contribution in pinojs/pino#2334

@dev-KingMaster made their first contribution in pinojs/pino#2340

@marklai1998 made their first contribution in pinojs/pino#2224

@CHC383 made their first contribution in pinojs/pino#2320

@omdxp made their first contribution in pinojs/pino#2358

@rChaoz made their first contribution in pinojs/pino#2372

Full Changelog: pinojs/pino@v10.1.0...v10.1.1

Commits

3390470 Bumped v10.1.1
791adbe fix: allow passing string, number, null for %o placeholder (#2372)
851a43f build(deps-dev): bump @types/node from 24.10.4 to 25.0.3 (#2367)
0c78849 build(deps): bump actions/checkout from 6.0.0 to 6.0.1 (#2365)
8a816c0 docs: add threat model to SECURITY.md (#2360)
5ec12e7 fix: harden transport loading against prototype pollution (#2358)
731afd2 build(deps): update thread-stream to v4 (#2356)
8141f9e build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#2354)
bf1ef34 feat(types): use ThreadStream type from thread-stream (#2320)
7dd79a3 docs: add Node.js 22+ native TypeScript type stripping support (#2347)
Additional commits viewable in compare view

Updates react-error-boundary from 6.0.2 to 6.0.3

Release notes

Sourced from react-error-boundary's releases.

6.0.3

Removed react-dom from peer dependencies list; it was accidentally added during a previous internal refactor

Commits

186ae40 6.0.2 -> 6.0.3
See full diff in compare view

Updates react-hook-form from 7.70.0 to 7.71.0

Release notes

Sourced from react-hook-form's releases.

Version 7.71.0

⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235) 🚄 perf: separate control context to prevent unnecessary rerenders (#13234) 🐞 fix: update isValid when field disabled state changes (#13231) 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

thanks to @kamja44, @a28689604 & @newsiberian

Commits

195139d 7.71.0
e26f886 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)
17c85ed 🚄 perf: separate control context to prevent unnecessary rerenders (#13234)
a084dcb ⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (...
65c78bc 🐞 fix: update isValid when field disabled state changes (#13231)
See full diff in compare view

Updates @types/k6 from 1.4.0 to 1.5.0

Commits

See full diff in compare view

Updates @types/nodemailer from 7.0.4 to 7.0.5

Commits

See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.8

Commits

See full diff in compare view

Updates bumpp from 10.3.2 to 10.4.0

Release notes

Sourced from bumpp's releases.

v10.4.0

No significant changes

View changes on GitHub

Commits

ef09634 chore: release v10.4.0
ccbb6a5 chore: update deps
f46daf0 refactor: remove unnecessary no prefix options and move default values (#102)
See full diff in compare view

Updates vite-tsconfig-paths from 6.0.3 to 6.0.4

Commits

f91de32 chore: release v6.0.4
232f17c fix: move vite to dependencies
8ecf047 fix: initialize resolvers before dependency pre-bundling occurs
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…2 updates Bumps the minor-and-patch group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.32.1` | `10.33.0` | | [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.5.0` | `12.6.0` | | [hono](https://github.com/honojs/hono) | `4.11.3` | `4.11.4` | | [import-in-the-middle](https://github.com/nodejs/import-in-the-middle) | `2.0.1` | `2.0.2` | | [pino](https://github.com/pinojs/pino) | `10.1.0` | `10.1.1` | | [react-error-boundary](https://github.com/bvaughn/react-error-boundary) | `6.0.2` | `6.0.3` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.70.0` | `7.71.0` | | [@types/k6](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/k6) | `1.4.0` | `1.5.0` | | [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `7.0.4` | `7.0.5` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.8` | | [bumpp](https://github.com/antfu-collective/bumpp) | `10.3.2` | `10.4.0` | | [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `6.0.3` | `6.0.4` | Updates `@sentry/nextjs` from 10.32.1 to 10.33.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.32.1...10.33.0) Updates `better-sqlite3` from 12.5.0 to 12.6.0 - [Release notes](https://github.com/WiseLibs/better-sqlite3/releases) - [Commits](WiseLibs/better-sqlite3@v12.5.0...v12.6.0) Updates `hono` from 4.11.3 to 4.11.4 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.3...v4.11.4) Updates `import-in-the-middle` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/nodejs/import-in-the-middle/releases) - [Changelog](https://github.com/nodejs/import-in-the-middle/blob/main/CHANGELOG.md) - [Commits](nodejs/import-in-the-middle@import-in-the-middle-v2.0.1...import-in-the-middle-v2.0.2) Updates `pino` from 10.1.0 to 10.1.1 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v10.1.0...v10.1.1) Updates `react-error-boundary` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/bvaughn/react-error-boundary/releases) - [Commits](bvaughn/react-error-boundary@6.0.2...6.0.3) Updates `react-hook-form` from 7.70.0 to 7.71.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.70.0...v7.71.0) Updates `@types/k6` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/k6) Updates `@types/nodemailer` from 7.0.4 to 7.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) Updates `@types/react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `bumpp` from 10.3.2 to 10.4.0 - [Release notes](https://github.com/antfu-collective/bumpp/releases) - [Commits](antfu-collective/bumpp@v10.3.2...v10.4.0) Updates `vite-tsconfig-paths` from 6.0.3 to 6.0.4 - [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases) - [Commits](aleclarson/vite-tsconfig-paths@v6.0.3...v6.0.4) --- updated-dependencies: - dependency-name: "@sentry/nextjs" dependency-version: 10.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: better-sqlite3 dependency-version: 12.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: hono dependency-version: 4.11.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: import-in-the-middle dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pino dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-error-boundary dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-hook-form dependency-version: 7.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/k6" dependency-version: 1.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/nodemailer" dependency-version: 7.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: bumpp dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite-tsconfig-paths dependency-version: 6.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 13, 2026

tilyupo merged commit 49f59a2 into main Jan 13, 2026
10 checks passed

tilyupo deleted the dependabot/npm_and_yarn/minor-and-patch-b68e94564a branch January 13, 2026 09:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates #41

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates #41

Uh oh!

dependabot bot commented on behalf of github Jan 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates #41

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates #41

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 13, 2026

10.33.0

Important Changes

Other Changes

10.33.0

Important Changes

Other Changes

v12.6.0

What's Changed

v4.11.4

Security

JWT middleware

JWK/JWKS middleware

What's Changed

New Contributors

import-in-the-middle: v2.0.2

2.0.2 (2026-01-11)

Bug Fixes

2.0.2 (2026-01-11)

Bug Fixes

v10.1.1

What's Changed

New Contributors

6.0.3

Version 7.71.0

v10.4.0

View changes on GitHub

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant