Skip to content

build(deps): Bump the npm group in /frontend with 15 updates - #304

Merged
KaliCZ merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-9332edc37e
Oct 15, 2026
Merged

build(deps): Bump the npm group in /frontend with 15 updates#304
KaliCZ merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-9332edc37e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group in /frontend with 15 updates:

Package From To
@iconify-json/material-symbols 1.2.94 1.2.95
@opentelemetry/context-zone 2.11.0 2.12.0
@opentelemetry/exporter-trace-otlp-http 0.222.0 0.223.0
@opentelemetry/instrumentation 0.222.0 0.223.0
@opentelemetry/instrumentation-document-load 0.67.0 0.68.0
@opentelemetry/instrumentation-fetch 0.222.0 0.223.0
@opentelemetry/resources 2.11.0 2.12.0
@opentelemetry/sdk-trace-web 2.11.0 2.12.0
@sentry/browser 11.4.0 11.6.0
@supabase/supabase-js 2.117.2 2.117.3
astro 7.3.5 7.3.8
@playwright/test 1.63.0 1.64.0
@sentry/vite-plugin 5.4.0 5.4.1
prettier 3.9.9 3.9.10
prettier-plugin-astro 1.1.0 1.1.1

Updates @iconify-json/material-symbols from 1.2.94 to 1.2.95

Commits

Updates @opentelemetry/context-zone from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/context-zone's releases.

v2.12.0

2.12.0

🚀 Features

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Changelog

Sourced from @​opentelemetry/context-zone's changelog.

2.12.0

🏠 Internal

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

  • chore(web-common)!: clean up and deprecate network span utils #7114
    • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
    • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

  • refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/instrumentation from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/instrumentation's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

  • chore(web-common)!: clean up and deprecate network span utils #7114
    • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
    • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

  • refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/instrumentation-document-load from 0.67.0 to 0.68.0

Changelog

Sourced from @​opentelemetry/instrumentation-document-load's changelog.

0.68.0 (2026-10-06)

Features

  • deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Bug Fixes

  • instrumentation-document-load: replace deprecated otperformance (#3727) (59b65c4)
Commits

Updates @opentelemetry/instrumentation-fetch from 0.222.0 to 0.223.0

Release notes

Sourced from @​opentelemetry/instrumentation-fetch's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

  • chore(web-common)!: clean up and deprecate network span utils #7114
    • These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.
    • Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

  • refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/resources from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.12.0

2.12.0

🚀 Features

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Changelog

Sourced from @​opentelemetry/resources's changelog.

2.12.0

🏠 Internal

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @opentelemetry/sdk-trace-web from 2.11.0 to 2.12.0

Release notes

Sourced from @​opentelemetry/sdk-trace-web's releases.

v2.12.0

2.12.0

🚀 Features

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Changelog

Sourced from @​opentelemetry/sdk-trace-web's changelog.

2.12.0

🏠 Internal

  • chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086
  • feat(ci): support releasing from maintenance branches #6767 @​pichlermarc
    • The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.
Commits
  • 92b844e chore: prepare next v2.x release (#7151)
  • a859aff fix(web-common): export getElementXPath utility (#7124)
  • 2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
  • d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
  • 5bd476e chore: move context manager to sdk-trace (#7086)
  • 554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
  • 788922c ci: support maintenance branch releases (#7036)
  • See full diff in compare view

Updates @sentry/browser from 11.4.0 to 11.6.0

Release notes

Sourced from @​sentry/browser's releases.

11.6.0

Important Changes

  • feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

    The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

    import * as Sentry from '@sentry/nextjs/cloudflare';
import handler from './.open-next/worker.js';
export default Sentry.withSentry(
env => ({
dsn: env.SENTRY_DSN,
tracesSampleRate: 1.0,
}),
handler,
);

  • feat(server-utils): Add instrumentation for pi-durable (#24993)

    The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

  • fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

    When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

  • feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
  • feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
  • fix(browser): Check for clock drift on page lifecycle events (#25091)
  • fix(core): Exclude attachments from internal exception events (#25160)
  • fix(effect): Convert Effect span times to the Sentry clock (#24972)
  • fix(effect): Detect HTTP spans named after the request method (#25159)
  • fix(node): Register Vercel keep-alive listeners once (#25146)
  • fix(replay): Place CLS and INP web vitals at the right time (#24990)
  • fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
  • fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)
  • chore: Add external contributor to CHANGELOG.md (#25136)
  • chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
  • chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)
  • feat(cloudflare): Wrap vinext Worker entries with @sentry/nextjs/cloudflare (#25000)

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

11.6.0

Important Changes

  • feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

    The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

    import * as Sentry from '@sentry/nextjs/cloudflare';
import handler from './.open-next/worker.js';
export default Sentry.withSentry(
env => ({
dsn: env.SENTRY_DSN,
tracesSampleRate: 1.0,
}),
handler,
);

  • feat(server-utils): Add instrumentation for pi-durable (#24993)

    The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

  • fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

    When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

  • feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
  • feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
  • fix(browser): Check for clock drift on page lifecycle events (#25091)
  • fix(core): Exclude attachments from internal exception events (#25160)
  • fix(effect): Convert Effect span times to the Sentry clock (#24972)
  • fix(effect): Detect HTTP spans named after the request method (#25159)
  • fix(node): Register Vercel keep-alive listeners once (#25146)
  • fix(replay): Place CLS and INP web vitals at the right time (#24990)
  • fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
  • fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)
  • chore: Add external contributor to CHANGELOG.md (#25136)
  • chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
  • chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)

... (truncated)

Commits
  • 3c0c830 release: 11.6.0
  • 13743e9 Merge pull request #25184 from getsentry/prepare-release/11.6.0
  • 3605c50 chore(size-limit): Bump @​sentry/node size limits
  • 53ae996 meta(changelog): Update changelog for 11.6.0
  • e99e6e1 feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
  • 2fdcb23 test(e2e): Add Mastra Jev classifier test to node-mastra (#25115)
  • 5bb9a68 feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate span...
  • 221dd86 test(e2e): Add a cloudflare-pi-durable end-to-end application (#25022)
  • 966e1ff feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
  • b70f6bb test(e2e): Add a node-pi-durable end-to-end application (#24994)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.117.2 to 2.117.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

  • deps: bump next to patch RCE in realtime-js example (#2733)
  • functions: send a Blob or File with its own content type (#2714)
  • postgrest: treat TimeoutError as an abort in retry guard (#2732)
  • storage: send multipart fields before files (#2736)

❤️ Thank You

v2.117.3-canary.1

2.117.3-canary.1 (2026-10-07)

🩹 Fixes

  • storage: send multipart fields before files (#2736)

❤️ Thank You

v2.117.3-canary.0

2.117.3-canary.0 (2026-10-02)

🩹 Fixes

  • deps: bump next to patch RCE in realtime-js example (#2733)
  • functions: send a Blob or File with its own content type (#2714)
  • postgrest: treat TimeoutError as an abort in retry guard (#2732)

❤️ Thank You

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.117.3 (2026-10-07)

🩹 Fixes

  • storage: send multipart fields before files (#2736)

❤️ Thank You

Commits

Updates astro from 7.3.5 to 7.3.8

Release notes

Sourced from astro's releases.

astro@7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

astro@7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

astro@7.3.6

Patch Changes

  • #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

  • #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

  • #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

  • #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

  • #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

  • #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

  • #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

  • #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

  • #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

  • #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

  • #18146 2af4516 Thanks @​astro-factory! - Fixes CSS imported from an injectScript('page') script being dropped during build

  • #18159 e5f8fe0 Thanks @​astro-factory! - Fixes a hang when a server:defer component is inside a slot of another component in an MDX content collection entry

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

7.3.6

Patch Changes

  • #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

  • #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

  • #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

  • #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

  • #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

  • #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

  • #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

  • #18193

@dependabot
build(deps): Bump the npm group in /frontend with 15 updates
0a192d1 
Bumps the npm group in /frontend with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@iconify-json/material-symbols](https://github.com/iconify/icon-sets) | `1.2.94` | `1.2.95` |
| [@opentelemetry/context-zone](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` |
| [@opentelemetry/instrumentation-document-load](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-document-load) | `0.67.0` | `0.68.0` |
| [@opentelemetry/instrumentation-fetch](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `11.4.0` | `11.6.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.117.2` | `2.117.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.3.8` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` |
| [@sentry/vite-plugin](https://github.com/getsentry/sentry-javascript-bundler-plugins) | `5.4.0` | `5.4.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `1.1.0` | `1.1.1` |


Updates `@iconify-json/material-symbols` from 1.2.94 to 1.2.95
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@opentelemetry/context-zone` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0)

Updates `@opentelemetry/instrumentation` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0)

Updates `@opentelemetry/instrumentation-document-load` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-document-load/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.68.0/packages/instrumentation-document-load)

Updates `@opentelemetry/instrumentation-fetch` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0)

Updates `@opentelemetry/resources` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `@opentelemetry/sdk-trace-web` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `@sentry/browser` from 11.4.0 to 11.6.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@11.4.0...11.6.0)

Updates `@supabase/supabase-js` from 2.117.2 to 2.117.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.117.3/packages/core/supabase-js)

Updates `astro` from 7.3.5 to 7.3.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro)

Updates `@playwright/test` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

Updates `@sentry/vite-plugin` from 5.4.0 to 5.4.1
- [Release notes](https://github.com/getsentry/sentry-javascript-bundler-plugins/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript-bundler-plugins/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript-bundler-plugins@5.4.0...5.4.1)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `prettier-plugin-astro` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: "@iconify-json/material-symbols"
  dependency-version: 1.2.95
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@opentelemetry/context-zone"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/instrumentation-document-load"
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/instrumentation-fetch"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@opentelemetry/sdk-trace-web"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sentry/browser"
  dependency-version: 11.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.117.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: astro
  dependency-version: 7.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sentry/vite-plugin"
  dependency-version: 5.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: prettier-plugin-astro
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from KaliCZ as a code owner October 14, 2026 17:51
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@KaliCZ
KaliCZ merged commit b2d4e72 into main Oct 15, 2026
7 checks passed
@KaliCZ
KaliCZ deleted the dependabot/npm_and_yarn/frontend/npm-9332edc37e branch October 15, 2026 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@KaliCZ KaliCZ KaliCZ approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@KaliCZ