Skip to content

chore(deps): bump the backend-minor-and-patch group across 1 directory with 10 updates#817

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-6d7360ac70
Open

chore(deps): bump the backend-minor-and-patch group across 1 directory with 10 updates#817
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-6d7360ac70

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-and-patch group with 9 updates in the /backend directory:

Package From To
@sentry/node 10.54.0 10.57.0
@sentry/profiling-node 10.54.0 10.57.0
@supabase/supabase-js 2.106.2 2.108.1
bullmq 5.76.2 5.78.1
date-fns 4.1.0 4.4.0
google-auth-library 10.6.2 10.7.0
@typescript-eslint/eslint-plugin 8.60.0 8.61.0
eslint 10.4.0 10.5.0
jest 30.3.0 30.4.2

Updates @sentry/node from 10.54.0 to 10.57.0

Release notes

Sourced from @​sentry/node's releases.

10.57.0

Important Changes

  • feat(angular): Add support for Angular 22 (#21330)

    @sentry/angular now officially supports Angular 22.

  • ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

    sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data. sendDefaultPii: true still works and maps to enabling all dataCollection categories. dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default. Data you set explicitly (like via Sentry.setUser()) is always sent regardless. When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

    Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

    Sentry.init({
      dataCollection: {
        userInfo: false,
        genAI: { inputs: false, outputs: false },
        httpBodies: [],
        httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      },
    });

Other Changes

  • feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
  • feat(cloudflare): Auto instrument D1 based on env (#21276)
  • feat(core): Change default of dataCollection.userInfo to true (#21348)
  • feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
  • feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • fix(cloudflare): Don't track negatively sampled spans (#21367)
  • fix(core): Use safeDateNow calls for new Date() reads (#21351)
  • fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
  • fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
  • fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
  • fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
  • fix(react): Remove unused react.componentStack event context (#21183)
  • fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)
  • chore: Bump volta node version from 20.19.2 to 20.19.5 (#21359)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.57.0

Important Changes

  • feat(angular): Add support for Angular 22 (#21330)

    @sentry/angular now officially supports Angular 22.

  • ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

    sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data. sendDefaultPii: true still works and maps to enabling all dataCollection categories. dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default. Data you set explicitly (like via Sentry.setUser()) is always sent regardless. When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

    Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

    Sentry.init({
      dataCollection: {
        userInfo: false,
        genAI: { inputs: false, outputs: false },
        httpBodies: [],
        httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      },
    });

Other Changes

  • feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
  • feat(cloudflare): Auto instrument D1 based on env (#21276)
  • feat(core): Change default of dataCollection.userInfo to true (#21348)
  • feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
  • feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • fix(cloudflare): Don't track negatively sampled spans (#21367)
  • fix(core): Use safeDateNow calls for new Date() reads (#21351)
  • fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
  • fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
  • fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
  • fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
  • fix(react): Remove unused react.componentStack event context (#21183)
  • fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)

... (truncated)

Commits
  • 950cf97 release: 10.57.0
  • 55f9343 Merge pull request #21369 from getsentry/prepare-release/10.57.0
  • 88d9d30 meta(changelog): Update changelog for 10.57.0
  • 03ffd25 fix(cloudflare): Don't track negatively sampled spans (#21367)
  • 7c19ead ref(node): Streamline sql-common (#21360)
  • 95df562 feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • 92eb5d2 feat(deps): Bump hono from 4.12.18 to 4.12.21 (#21341)
  • c6f790b fix(node): Prevent PostgresJs integration from emitting duplicate spans per q...
  • d645349 ref(node): Streamline lru-memoizer instrumentation (#21350)
  • 4293015 feat(deps): Bump @​types/aws-lambda from 8.10.150 to 8.10.161 (#21105)
  • Additional commits viewable in compare view

Updates @sentry/profiling-node from 10.54.0 to 10.57.0

Release notes

Sourced from @​sentry/profiling-node's releases.

10.57.0

Important Changes

  • feat(angular): Add support for Angular 22 (#21330)

    @sentry/angular now officially supports Angular 22.

  • ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

    sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data. sendDefaultPii: true still works and maps to enabling all dataCollection categories. dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default. Data you set explicitly (like via Sentry.setUser()) is always sent regardless. When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

    Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

    Sentry.init({
      dataCollection: {
        userInfo: false,
        genAI: { inputs: false, outputs: false },
        httpBodies: [],
        httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      },
    });

Other Changes

  • feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
  • feat(cloudflare): Auto instrument D1 based on env (#21276)
  • feat(core): Change default of dataCollection.userInfo to true (#21348)
  • feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
  • feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • fix(cloudflare): Don't track negatively sampled spans (#21367)
  • fix(core): Use safeDateNow calls for new Date() reads (#21351)
  • fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
  • fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
  • fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
  • fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
  • fix(react): Remove unused react.componentStack event context (#21183)
  • fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)
  • chore: Bump volta node version from 20.19.2 to 20.19.5 (#21359)

... (truncated)

Changelog

Sourced from @​sentry/profiling-node's changelog.

10.57.0

Important Changes

  • feat(angular): Add support for Angular 22 (#21330)

    @sentry/angular now officially supports Angular 22.

  • ref(core): Deprecate sendDefaultPii in favor of dataCollection (#21277)

    sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data. sendDefaultPii: true still works and maps to enabling all dataCollection categories. dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default. Data you set explicitly (like via Sentry.setUser()) is always sent regardless. When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

    Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

    Sentry.init({
      dataCollection: {
        userInfo: false,
        genAI: { inputs: false, outputs: false },
        httpBodies: [],
        httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
        queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      },
    });

Other Changes

  • feat: Use dataCollection.frameContextLines for ContextLines integration (#21323)
  • feat(cloudflare): Auto instrument D1 based on env (#21276)
  • feat(core): Change default of dataCollection.userInfo to true (#21348)
  • feat(core): Default dataCollection.httpBodies to all valid body types (#21352)
  • feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • fix(cloudflare): Don't track negatively sampled spans (#21367)
  • fix(core): Use safeDateNow calls for new Date() reads (#21351)
  • fix(nextjs): Shim pinoIntegration on edge runtime (#21347)
  • fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#21364)
  • fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#21339)
  • fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#21326)
  • fix(react): Remove unused react.componentStack event context (#21183)
  • fix(replays): Record sentry._internal.replay_is_buffering for spans (#21297)

... (truncated)

Commits
  • 950cf97 release: 10.57.0
  • 55f9343 Merge pull request #21369 from getsentry/prepare-release/10.57.0
  • 88d9d30 meta(changelog): Update changelog for 10.57.0
  • 03ffd25 fix(cloudflare): Don't track negatively sampled spans (#21367)
  • 7c19ead ref(node): Streamline sql-common (#21360)
  • 95df562 feat(hono): Filter noisy transactions (favicon etc) (#21365)
  • 92eb5d2 feat(deps): Bump hono from 4.12.18 to 4.12.21 (#21341)
  • c6f790b fix(node): Prevent PostgresJs integration from emitting duplicate spans per q...
  • d645349 ref(node): Streamline lru-memoizer instrumentation (#21350)
  • 4293015 feat(deps): Bump @​types/aws-lambda from 8.10.150 to 8.10.161 (#21105)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.106.2 to 2.108.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.108.1

2.108.1 (2026-06-09)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)
  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.2

2.108.1-canary.2 (2026-06-09)

This was a version bump only, there were no code changes.

v2.108.1-canary.1

2.108.1-canary.1 (2026-06-08)

🩹 Fixes

  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.0

2.108.1-canary.0 (2026-06-08)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)

❤️ Thank You

v2.108.0

2.108.0 (2026-06-08)

🚀 Features

  • auth: auth.resend() consistent confirmation flow (#2144)

🩹 Fixes

  • auth: do not console.error AuthApiError already returned through contract (#2428)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

Commits
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • 57014e1 chore(release): version 2.107.0 changelogs (#2421)
  • 54ec2b6 feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...
  • 3397c92 feat(supabase): update X-Client-Info to structured metadata format (#2359)
  • 335207f feat(realtime): allow httpSend to send binary payload (#2400)
  • 42f12dd docs(repo): ship per-package AGENTS.md and migrations via npm (#2397)
  • b200b74 chore(release): version 2.106.2 changelogs (#2396)
  • See full diff in compare view

Updates bullmq from 5.76.2 to 5.78.1

Release notes

Sourced from bullmq's releases.

v5.78.1

5.78.1 (2026-06-13)

Bug Fixes

  • scheduler: fail stalled jobs if scheduler does not longer exist (elixir) (rust) (#4222) (d1fcda5)

v5.78.0

5.78.0 (2026-06-02)

Features

  • rust: initial implementation of rust support (#4200) (38798cc)

v5.77.7

5.77.7 (2026-06-01)

Bug Fixes

  • deps: update dependency msgpackr to v2.0.2 [security] (#4202) (fbe04af)

v5.77.6

5.77.6 (2026-05-27)

Bug Fixes

  • types: change NodeRedisRawClient to be node-redis compliant (#4195) (81709e4)

v5.77.5

5.77.5 (2026-05-27)

Bug Fixes

  • connection: handle cluster reconnection with timeouts (#4186) (411690e)

v5.77.4

5.77.4 (2026-05-26)

Bug Fixes

  • deduplication: preserve custom jobId when requeuing keepLastIfActive proto-jobs (#4190) fixes #4030 (6e4972e)

v5.77.3

5.77.3 (2026-05-25)

... (truncated)

Commits
  • d1fcda5 fix(scheduler): fail stalled jobs if scheduler does not longer exist (elixir)...
  • 3db7b21 chore(deps): bump shell-quote (#4218)
  • cda941a fix(release): include commands [rust] (#4208)
  • cb6b801 feat: add job schedulers and release Lua script sync [rust] (#4207)
  • 3fe7cb1 fix(relase): copy lua scripts [rust] (#4206)
  • 9b75313 chore(deps): update dependency semver to v7.8.1 [security] (#4204)
  • c89d7ef chore(release): 5.78.0 (#4205)
  • 3ce5930 chore(deps): update devdependencies (non-major) [security] (#4191)
  • 38798cc feat(rust): initial implementation of rust support (#4200)
  • a45e0d9 chore(release): 5.77.7 (#4203)
  • Additional commits viewable in compare view

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @​ImRodry and @​puneetdixit200 for their contributions.

Fixed

v4.2.1

Fixed

  • Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

  • Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.
Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • f95bcf1 (docs): Add missing tsx dependency
  • Additional commits viewable in compare view

Updates google-auth-library from 10.6.2 to 10.7.0

Changelog

Sourced from google-auth-library's changelog.

Changelog

npm history

Commits

Updates @typescript-eslint/eslint-plugin from 8.60.0 to 8.61.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

  • ast-spec: change type of UnaryExpression.prefix to always true (#12372)
  • ast-spec: tighten types of ArrowFunction, YieldExpression, TSTypePredicate (#12373)

🩹 Fixes

  • rule-schema-to-typescript-types: respect ECMAScript line terminators (#12374)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

  • eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)
  • eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.61.0 (2026-06-08)

🚀 Features

  • ast-spec: change type of UnaryExpression.prefix to always true (#12372)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.1 (2026-06-01)

🩹 Fixes

  • eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)
  • eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 16a5b24 chore(release): publish 8.61.0
  • ef1fd28 feat(ast-spec): change type of UnaryExpression.prefix to always true (#12...
  • 4f84a69 chore(release): publish 8.60.1
  • 598af56 docs(eslint-plugin): clarify no-redeclare type-value collision not covered by...
  • 1849b53 chore: typecheck using tsgo (#12139)
  • 5341d59 chore: fix lint issues (#12369)
  • f525814 fix(eslint-plugin): [no-shadow] correct rule to match ESLint v10 handling (#1...
  • 2df540c chore(eslint-plugin): defer type checks to improve rules performance (#12296)
  • 1ab4284 fix(eslint-plugin): respect ECMAScript line terminators in ts-comment rules (...
  • 2f49df5 docs: update references to @stylistic/eslint-plugin rules in documentation ...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.60.0 to 8.61.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

  • ast-spec: change type of UnaryExpression.prefix to always true (#12372)
  • ast-spec: tighten types of ArrowFunction, YieldExpression, TSTypePredicate (#12373)

🩹 Fixes

  • rule-schema-to-typescript-types: respect ECMAScript line terminators (#12374)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

  • eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)
  • eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.61.0 (2026-06-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.1 (2026-06-01)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.4.0 to 10.5.0

Release notes

Sourced from eslint's releases.

v10.5.0

Features

  • 5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)
  • b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)
  • 2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)
  • 732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)
  • f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)
  • bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)
  • c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

  • 8ae1b5b docs: Update README (GitHub Actions Bot)
  • ca7eb90 docs: update Node.js prerequisites to include ICU support (#20962) (Francesco Trotta)
  • f99b47a docs: Update README (GitHub Actions Bot)
  • acf03d4 docs: clarify precedence of parserOptions over languageOptions (#20926) (sethamus)

Chores

  • b18bf58 chore: update ecosystem plugins (#20959) (ESLint Bot)
  • c2d1444 refactor: replace areAllSegmentsUnreachable with !isAnySegmentReachable (#20951) (Taejin Kim)
  • 243b8c5 chore: enhance config-rule to support oneOf, anyOf, and nested schemas (#20788) (kuldeep kumar)
  • 217b2a9 test: add unit tests for ParserService (#20949) (Taejin Kim)
  • 72003e7 test: add location information to error messages in max-statements (#20945) (lumir)
  • 7797c26 refactor: deduplicate isAnySegmentReachable across rules (#20890) (Taejin Kim)
  • 67c46fa chore: update ecosystem plugins (#20938) (ESLint Bot)
  • 95d8c7a chore: update dependency @​eslint/json to v2 (#20934) (renovate[bot])
  • cf9e496 chore: update @​arethetypeswrong/cli to 0.18.3 (#20933) (Pixel998)
  • fb6d396 test: run type tests with TypeScript 7 (#20868) (sethamus)

v10.4.1

Bug Fixes

  • e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
  • d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
  • f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
  • c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
  • 27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

  • 61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
  • 305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
  • 49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
  • 9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
  • c91b041 docs: Update README (GitHub Actions Bot)
  • e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

  • b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
  • f78838b test: add CodePath type coverage (#20904) (Pixel998)
  • 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
  • 002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
  • 64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)

... (truncated)

Commits
  • de3b672 10.5.0
  • 362a518 Build: changelog update for 10.5.0
  • 5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973)
  • b565783 feat: report no-with violations at the with keyword (#20971)
  • 2ce032f feat: report max-lines-per-function violations at function head (#20966)
  • 732cb3e feat: report max-nested-callbacks violations at function head (#20967)

…y with 10 updates

Bumps the backend-minor-and-patch group with 9 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.54.0` | `10.57.0` |
| [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript) | `10.54.0` | `10.57.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.106.2` | `2.108.1` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.76.2` | `5.78.1` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node-core/tree/HEAD/packages/google-auth-library-nodejs) | `10.6.2` | `10.7.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.0` | `8.61.0` |
| [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.5.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.3.0` | `30.4.2` |



Updates `@sentry/node` from 10.54.0 to 10.57.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.54.0...10.57.0)

Updates `@sentry/profiling-node` from 10.54.0 to 10.57.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.54.0...10.57.0)

Updates `@supabase/supabase-js` from 2.106.2 to 2.108.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.108.1/packages/core/supabase-js)

Updates `bullmq` from 5.76.2 to 5.78.1
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.76.2...v5.78.1)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `google-auth-library` from 10.6.2 to 10.7.0
- [Release notes](https://github.com/googleapis/google-cloud-node-core/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node-core/blob/main/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node-core/commits/HEAD/packages/google-auth-library-nodejs)

Updates `@typescript-eslint/eslint-plugin` from 8.60.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.60.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/parser)

Updates `eslint` from 10.4.0 to 10.5.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.0...v10.5.0)

Updates `jest` from 30.3.0 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

---
updated-dependencies:
- dependency-name: "@sentry/node"
  dependency-version: 10.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@sentry/profiling-node"
  dependency-version: 10.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.108.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: bullmq
  dependency-version: 5.78.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: google-auth-library
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: eslint
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the Backend label Jun 15, 2026
@dependabot dependabot Bot requested a review from Calebux as a code owner June 15, 2026 06:35
@dependabot dependabot Bot added the Backend label Jun 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants