chore(deps): bump the npm-dependencies group across 1 directory with 45 updates

[dependabot]

Bumps the npm-dependencies group with 45 updates in the / directory:

Package	From	To
lint-staged	17.0.8	17.2.0
tegami	1.2.4	1.2.6
turbo	2.10.2	2.10.7
@types/node	26.1.0	26.1.1
esbuild	0.25.12	0.28.1
typescript	6.0.3	7.0.2
vitest	4.1.9	4.1.10
@vercel/oidc	3.8.0	3.8.1
lru-cache	11.5.1	11.5.2
satori	0.26.0	0.29.0
simple-icons	16.24.1	16.27.1
svgo	4.0.1	4.0.2
@sentry/nextjs	10.63.0	10.68.0
next	16.2.10	16.2.12
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
@sentry/profiling-node	10.63.0	10.68.0
@central-icons-react/round-filled-radius-1-stroke-1.5	1.1.290	1.1.298
@central-icons-react/round-filled-radius-3-stroke-1.5	1.1.290	1.1.298
@central-icons-react/round-outlined-radius-3-stroke-1.5	1.1.290	1.1.298
@number-flow/react	0.6.1	0.6.2
@tabler/icons-react	3.44.0	3.45.0
@tanstack/react-virtual	3.14.5	3.14.8
@tiptap/extension-heading	3.27.1	3.29.0
@tiptap/extension-paragraph	3.27.1	3.29.0
@tiptap/extension-text-align	3.27.1	3.29.0
@tiptap/pm	3.27.1	3.29.0
@tiptap/react	3.27.1	3.29.0
@tiptap/starter-kit	3.27.1	3.29.0
better-auth	1.6.23	1.6.25
context.dev	1.41.0	2.6.0
fumadocs-core	16.10.7	16.12.1
fumadocs-mdx	15.0.13	15.2.0
jose	6.2.3	6.2.4
lucide-react	1.23.0	1.27.0
nuqs	2.9.0	2.9.2
radix-ui	1.6.1	1.6.7
recharts	3.8.0	3.10.1
shiki	4.3.0	4.3.1
@tailwindcss/postcss	4.3.2	4.3.3
eslint	9.39.4	10.8.0
eslint-config-next	16.2.10	16.2.12
shadcn	4.12.0	4.15.0
tailwindcss	4.3.2	4.3.3
tsx	4.22.5	4.23.1

Updates lint-staged from 17.0.8 to 17.2.0

Release notes

Sourced from lint-staged's releases.

v17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

v17.1.1

Patch Changes

• #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

v17.1.0

Minor Changes

• #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

  Before:

  Size of node_modules/ after installing: 1561.7 kB with 29 packages.

  Fancy interactive spinners, but output dynamically changes:

  ✔ Backed up original state in git stash (0b191303)
  ✔ Running tasks for staged files...
  ✔ Staging changes from tasks...
  ✔ Cleaning up temporary files...

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

17.1.1

Patch Changes

• #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

17.1.0

Minor Changes

• #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

  Before:

  Size of node_modules/ after installing: 1561.7 kB with 29 packages.

  Fancy interactive spinners, but output dynamically changes:

  ✔ Backed up original state in git stash (0b191303)
  ✔ Running tasks for staged files...

... (truncated)

Commits

• fb540fb Merge pull request #1824 from lint-staged/changeset-release/main
• dc0a738 chore(changeset): release
• 60cbb88 Merge pull request #1823 from lint-staged/reimplement-chunk-files
• 2354dc4 build(deps): update dependencies
• 0516e7f docs: adjust debug logs
• e22f6ed style: run oxfmt on README.md
• 37e8e1a fix: restore chunking of git add command after running tasks
• 2c75f1d chore: remove unused file
• ee156cc feat: add improved lazy-chunking of command strings
• baa7c98 feat: remove current chunkFiles implementation
• Additional commits viewable in compare view

Updates tegami from 1.2.4 to 1.2.6

Release notes

Sourced from tegami's releases.

tegami@1.2.6

Preserve interactive registry authentication (803216c)

Registry publishing now retains terminal access during local interactive runs, allowing browser and two-factor authentication to complete before publishing continues.

• #62 fix(npm): preserve interactive authentication during publish by @​aryasaatvik

tegami@1.2.5

Fix ci command order problem (7fdf405)

The ci now correctly prioritize versioning over publishing.

Commits

• c93b2f6 Version Packages (#63)
• 803216c Merge pull request #62 from aryasaatvik/fix/interactive-registry-auth
• 55923a8 docs: unify sponsors page
• ee5eeed pretrust
• b1c1e8d Version Packages (#59)
• 7fdf405 fix(core): ci command ordering
• f760277 feat(*): independent package versions
• bbf3e70 feat(zig): support zig plugin
• 691a95b docs: improve og image
• See full diff in compare view

Updates turbo from 2.10.2 to 2.10.7

Release notes

Sourced from turbo's releases.

Turborepo v2.10.7-canary.1

What's Changed

Changelog

• release(turborepo): 2.10.6-canary.5 by @​github-actions[bot] in vercel/turborepo#13424
• chore: Upgrade brace-expansion by @​anthonyshew in vercel/turborepo#13429
• chore: Update tar to 7.5.18 by @​anthonyshew in vercel/turborepo#13428
• chore: Upgrade js-yaml by @​anthonyshew in vercel/turborepo#13427
• fix: Match JIT inputs for affected tasks by @​anthonyshew in vercel/turborepo#13426
• fix: Preserve project Yarn package extensions by @​anthonyshew in vercel/turborepo#13425
• release(turborepo): 2.10.6 by @​github-actions[bot] in vercel/turborepo#13431
• chore: Refine bug report template help section by @​anthonyshew in vercel/turborepo#13433
• fix: Verify version after attempting codemod upgrade by @​anthonyshew in vercel/turborepo#13446
• test: Characterize JavaScript package discovery by @​anthonyshew in vercel/turborepo#13440
• refactor: Separate package graph node assembly by @​anthonyshew in vercel/turborepo#13441
• fix: Upgrade @​vercel/connect by @​anthonyshew in vercel/turborepo#13450
• refactor: Add authoritative package knowledge by @​anthonyshew in vercel/turborepo#13442
• feat: Select runnable task entrypoints by @​anthonyshew in vercel/turborepo#13452
• refactor: Add workspace root contribution contract by @​anthonyshew in vercel/turborepo#13447
• refactor: Use package knowledge for scope selection by @​anthonyshew in vercel/turborepo#13443
• fix: Prevent mobile homepage overflow by @​anthonyshew in vercel/turborepo#13453
• docs: Document service readiness probes by @​anthonyshew in vercel/turborepo#13472
• fix: Preserve pnpm root dependencies during prune by @​anthonyshew in vercel/turborepo#13476
• fix: Preserve pnpm aliased dependencies during prune by @​anthonyshew in vercel/turborepo#13477

Full Changelog: vercel/turborepo@v2.10.6-canary.5...v2.10.7-canary.1

Turborepo v2.10.6

What's Changed

Changelog

• release(turborepo): 2.10.5 by @​github-actions[bot] in vercel/turborepo#13368
• fix: Disable unresolved Cargo artifact caching by @​anthonyshew in vercel/turborepo#13362
• fix: Surface create-turbo Git failures by @​anthonyshew in vercel/turborepo#13371
• fix: Resolve exact cargo profile outputs by @​anthonyshew in vercel/turborepo#13366
• fix: Prune Bun production workspace dev dependencies by @​anthonyshew in vercel/turborepo#13369
• fix: Resolve Cargo target output layouts by @​anthonyshew in vercel/turborepo#13370
• release(turborepo): 2.10.6-canary.1 by @​github-actions[bot] in vercel/turborepo#13374
• fix: Preserve Yarn Babel extension during pruning by @​anthonyshew in vercel/turborepo#13373
• feat: Support Cargo-only repos by @​anthonyshew in vercel/turborepo#13378
• fix: Preserve colors in TUI output by @​anthonyshew in vercel/turborepo#13381
• feat: Infer Cargo workspace tasks by @​anthonyshew in vercel/turborepo#13380
• fix: Retain shutdown signals for force exit by @​anthonyshew in vercel/turborepo#13382
• release(turborepo): 2.10.6-canary.2 by @​github-actions[bot] in vercel/turborepo#13383
• fix: Resolve weekly security audit vulnerabilities by @​cursor[bot] in vercel/turborepo#13358
• chore: Update to Rust 1.97.0 by @​ognevny in vercel/turborepo#13322
• fix: Pin VS Code extension macOS runners by @​anthonyshew in vercel/turborepo#13391

... (truncated)

Commits

• See full diff in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates esbuild from 0.25.12 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

• Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

  This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

  Thanks to @​dellalibera for reporting this issue.

• Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

  The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

  Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

  Thanks to @​sondt99 for reporting this issue.

• Avoid inlining using and await using declarations (#4482)

  Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

  // Original code
  {
    using x = new Resource()
    x.activate()
  }
  // Old output (with --minify)
  new Resource().activate();
  // New output (with --minify)
  {using e=new Resource;e.activate()}

• Fix module evaluation when an error is thrown (#4461, #4467)

  If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

• Fix some edge cases around the new operator (#4477)

  Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

  // Original code
  new (foo()`bar`)()
  new (foo()?.bar)()
  // Old output
  new foo()bar();
  new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

• Allow import path specifiers starting with #/ (#4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#4357, #4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  /* Old output (with --target=chrome110) */
  main {
  mask: url(x.png) center/5rem no-repeat;
  }
  /* New output (with --target=chrome110) */
  main {
  -webkit-mask: url(x.png) center/5rem no-repeat;
  mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#4176, #4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }

... (truncated)

Commits

• bb9db84 publish 0.28.1 to npm
• 9ff053e security: add integrity checks to the Deno API
• 0a9bf21 enforce non-negative size in gzip parser
• e2a1a71 security: forbid \\ in local dev server requests
• 83a2cbf fix #4482: don't inline using declarations
• 308ad74 fix #4471: renaming of nested var declarations
• f013f5f fix some typos
• aafd6e4 chore: fix some minor issues in comments (#4462)
• 15300c3 follow up: cjs evaluation fixes
• 1bda0c3 fix #4461, fix #4467: esm evaluation fixes
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Updates @vercel/oidc from 3.8.0 to 3.8.1

Release notes

Sourced from @​vercel/oidc's releases.

@​vercel/oidc@​3.8.1

Patch Changes

• Updated dependencies [6e29745]
  • @​vercel/cli-config@​0.2.1

Changelog

Sourced from @​vercel/oidc's changelog.

3.8.1

Patch Changes

• Updated dependencies [6e29745]
  • @​vercel/cli-config@​0.2.1

Commits

• c769366 Version Packages (#17198)
• See full diff in compare view

Updates lru-cache from 11.5.1 to 11.5.2

Commits

• 16b3a91 11.5.2
• 0b0a77e fire autopurge again if the first time isn't stale
• See full diff in compare view

Updates satori from 0.26.0 to 0.29.0

Release notes

Sourced from satori's releases.

0.29.0

0.29.0 (2026-07-23)

Features

• add support for webp images (#622) (b712d5b), closes #607 #539 #273 #311

0.28.2

0.28.2 (2026-07-21)

Bug Fixes

• replace Yoga build flag for browsers (#774) (dc2e1c5), closes #749

0.28.1

0.28.1 (2026-07-20)

Bug Fixes

• render text matching Object.prototype property names as glyphs (#761) (504b4c9)

0.28.0

0.28.0 (2026-07-14)

Features

• trigger npm publish after OIDC fix (#771) (b5c1f64)

0.27.0

0.27.0 (2026-04-29)

Bug Fixes

• Fixed error when rendering React Fragments inside <svg>

Commits

• b712d5b feat: add support for webp images (#622)
• dc2e1c5 fix: replace Yoga build flag for browsers (#774)
• 504b4c9 fix: render text matching Object.prototype property names as glyphs (#761)
• b5c1f64 feat: trigger npm publish after OIDC fix (#771)
• 8119856 docs: fix flexWrap default from 'wrap' to 'nowrap' (#767)
• 2120646 ci: publish via npm trusted publishing (OIDC) (#770)
• 2d3af44 fix: SSRF guard for server-side image fetches + pluggable fetcher (#769)
• 9feec94 fix: text matching Object.prototype property names rendered as image (#768)
• 91ade3b ci: declare minimum permissions on PR title workflow (#756)
• ab49faf chore: migrate workspace to pnpm 10 (#762)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for satori since your current version.

Updates simple-icons from 16.24.1 to 16.27.1

Release notes

Sourced from simple-icons's releases.

Release 16.27.1

2 updated icons

• Kimi (#14883) (@​LitoMore)
• Threads (#14879) (@​coopbri)

Release 16.27.0

1 new icon

• CodeBuddy (#14865) (@​LitoMore)

Release 16.26.0

2 new icons

• KIMI (#14861) (@​LitoMore)
• Z.ai (#14857) (@​tonylawx)

Release 16.25.0

1 new icon

• Glass (#14850) (@​ys-chung, @​cscnk52)

Commits

• 7dd8ec9 Replace README CDN theme image links
• dbea629 Release 16.27.1
• 25d6e5b Bump version to 16.27.1
• 070d5d5 Update Threads icon (#14879)
• c53db56 Update Kimi icon title (#14883)
• f7cc400 Release 16.27.0
• a78ea66 Bump version to 16.27.0
• afd8c82 Add CodeBuddy icon (#14865)
• f739261 Release 16.26.0
• 0f9fa54 Bump version to 16.26.0
• Additional commits viewable in compare view

Updates svgo from 4.0.1 to 4.0.2

Release notes

Sourced from svgo's releases.

v4.0.2

What's Changed

Security

• removeScripts, remove JavaScript URIs case-insensitively and make <script> handling namespace aware. By @​SethFalco

Bug Fixes

• convertColors, skip case-normalization for CSS custom properties. By @​SethFalco in svg/svgo#2213
• convertPathData, improve handling of consecutive t commands. By @​KTibow in svg/svgo#2156
• convertPathData, safer handling of paths. By @​KTibow in svg/svgo#2158
• Improve parsing of negative (or +) arc radii. By @​KTibow in svg/svgo#2205
• When converting to a data URI, only encode it as a data URI once. By @​johnkenny54 in svg/svgo#2053

Performance

• mergePaths, speed up child node removal. By @​mozzie in svg/svgo#2216

Other Changes

• removeAttributesBySelector, log warning and noop if missing parameters. By @​KTibow in svg/svgo#2215

Commits

• b2309cf chore: sync version with api
• f529cfc Merge commit from fork
• 581fe68 performance: speed up mergePath child node removal (#2216)
• eb4c8b6 docs(removeAttributesBySelector): properly document and check types (#2215)
• 6fd5872 fix(convertColors): skip convertCase on css custom properties (#2213)
• 7414f73 fix: properly parse negative (or +) arc radii (#2205)
• a8c19aa fix: only call encodeSVGDatauri once and add test case (#2053)
• 65548f4 fix(convertPathData): properly handle consecutive t commands (#2156)
• a41a7c1 fix(convertPathData): introducing isSafeToRemove (#2164)
• 38625dd test: handle charm icons (#2203)
• See full diff in compare view

Updates @sentry/nextjs from 10.63.0 to 10.68.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.68.0

• feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
• feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
• feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
• feat(server-utils): Allow integrations to be part of marker (#22094)
• feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
• feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
• feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
• feat(v10): Add url.full and url.path to http.server spans (#22533)
• feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
• feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
• feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
• feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
• feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
• feat(v10/core): Add instrumentStateGraph API (#22491)
• feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
• feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
• feat(v10/react-router): Make instrumentation API the default (#22525)
• fix(cloudflare,deno,node): Align types of vercelai (#22343)
• fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
• fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
• fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
• fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
• fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
• fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
• fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

• chore: Add external contributor to CHANGELOG.md (#22342)
• chore: Add external contributor to CHANGELOG.md (#22405)
• chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
• chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
• chore(size-limit): weekly auto-bump (#22182)
• ci(v10): Add v10 to build and license-compliance branch filters (#22499)
• feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)
• ref(server-utils): Remove unneeded orchestrion config (#22384)
• ref(server-utils): Small fastify cleanup (#22385)
• test: Remove unnecessary test waits (#22383)
• test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)
• test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.68.0

• feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
• feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
• feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
• feat(server-utils): Allow integrations to be part of marker (#22094)
• feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
• feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
• feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
• feat(v10): Add url.full and url.path to http.server spans (#22533)
• feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
• feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
• feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
• feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
• feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
• feat(v10/core): Add instrumentStateGraph API (#22491)
• feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
• feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
• feat(v10/react-router): Make instrumentation API the default (#22525)
• fix(cloudflare,deno,node): Align types of vercelai (#22343)
• fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
• fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
• fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
• fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
• fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
• fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
• fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

• chore: Add external contributor to CHANGELOG.md (#22342)
• chore: Add external contributor to CHANGELOG.md (#22405)
• chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
• chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
• chore(size-limit): weekly auto-bump (#22182)
• ci(v10): Add v10 to build and l...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
shieldcn	Error		Jul 26, 2026 6:39pm