Skip to content

build(deps): bump the runtime group across 1 directory with 4 updates - #239

Closed
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/runtime-1fcaad3390
Closed

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/runtime-1fcaad3390

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the runtime group with 4 updates in the / directory: @sentry/nextjs, firebase, lucide-react and tailwind-merge.

Updates @sentry/nextjs from 10.74.0 to 10.76.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.76.0

  • feat(v10/vue,nuxt): Record default UI spans without Options API (mixins) (#24885)
  • fix(v10/aws-serverless): Keep Lambda extension polling past 300s (#24828)
  • fix(v10/deno): Flush buffered metrics and logs before process exit (#24938)
  • fix(v10/nitro): Capture errors only through the Nitro error hook (#24963)
  • fix(v10/node-core): Flush buffered metrics on process exit (#24937)
  • fix(v10/react-router): Avoid duplicating Vite config arrays (#24936)
  • fix(v10/tanstackstart-react): Avoid duplicating Vite config arrays (#24935)
  • test(v10/effect): Make effect/http stable (#24942)

Bundle size 📦

Path Size
@​sentry/browser 27.56 KB
@​sentry/browser - with treeshaking flags 26.04 KB
@​sentry/browser (incl. Tracing) 46.02 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.77 KB
@​sentry/browser (incl. Tracing, Profiling) 50.67 KB
@​sentry/browser (incl. Tracing, Replay) 84.38 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 74.28 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 89 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 101.33 KB
@​sentry/browser (incl. Feedback) 44.33 KB
@​sentry/browser (incl. sendFeedback) 32.25 KB
@​sentry/browser (incl. FeedbackAsync) 37.27 KB
@​sentry/browser (incl. Metrics) 28.62 KB
@​sentry/browser (incl. Logs) 28.84 KB
@​sentry/browser (incl. Metrics & Logs) 29.52 KB
@​sentry/react 29.32 KB
@​sentry/react (incl. Tracing) 48.28 KB
@​sentry/vue 33.2 KB
@​sentry/vue (incl. Tracing) 48.3 KB
@​sentry/svelte 27.58 KB
CDN Bundle 29.87 KB
CDN Bundle (incl. Tracing) 47.92 KB
CDN Bundle (incl. Logs, Metrics) 31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.82 KB
CDN Bundle (incl. Tracing, Replay) 84.64 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 85.87 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 90.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 91.55 KB
CDN Bundle - uncompressed 88.83 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.76.0

  • feat(v10/vue,nuxt): Record default UI spans without Options API (mixins) (#24885)
  • fix(v10/aws-serverless): Keep Lambda extension polling past 300s (#24828)
  • fix(v10/deno): Flush buffered metrics and logs before process exit (#24938)
  • fix(v10/nitro): Capture errors only through the Nitro error hook (#24963)
  • fix(v10/node-core): Flush buffered metrics on process exit (#24937)
  • fix(v10/react-router): Avoid duplicating Vite config arrays (#24936)
  • fix(v10/tanstackstart-react): Avoid duplicating Vite config arrays (#24935)
  • test(v10/effect): Make effect/http stable (#24942)

10.75.3

  • fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)
  • chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
  • chore(v10/publish): Tag all packages as v10 (#24619)

10.75.2

  • fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)
  • fix(v10/core): Apply dataCollection.urlQueryParams to collected URLs and query strings (#24572)
  • fix(v10/nextjs): Align tunnel request matching in middleware with tunnel rewrite (#24565)
  • fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams (#24563)

10.75.1

  • fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)
  • fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)
  • fix(v10/hono): Allow @​cloudflare/workers-types v5 as peer dependency (#24500)
  • fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

... (truncated)

Commits
  • 0e0b5ca release: 10.76.0
  • 96f8b0b meta(changelog): Update changelog for 10.76.0 (#25005)
  • 2291a29 feat(v10/vue,nuxt): Record default UI spans without Options API (mixins) (#24...
  • e8dfc58 fix(v10/nitro): Capture errors only through the Nitro error hook (#24963)
  • 3a57cd3 fix(v10/node-core): Flush buffered metrics on process exit (#24937)
  • 0c6bd53 test(v10/effect): Make effect/http stable (#24942)
  • 381abf1 fix(v10/deno): Flush buffered metrics and logs before process exit (#24938)
  • 9271450 fix(v10/react-router): Avoid duplicating Vite config arrays (#24936)
  • e326388 fix(v10/tanstackstart-react): Avoid duplicating Vite config arrays (#24935)
  • a681ae6 fix(v10/aws-serverless): Keep Lambda extension polling past 300s (#24828)
  • Additional commits viewable in compare view

Updates firebase from 12.18.0 to 12.19.0

Release notes

Sourced from firebase's releases.

firebase@12.19.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.16.0

Minor Changes

  • 6b17ef5 #10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash

Patch Changes

  • 6f86596 #10320 - Fixed a client-side validation guardrail that incorrectly blocked text/x.enum when responseSchema or responseJsonSchema was provided. The SDK now correctly accepts both application/json and text/x.enum for structured outputs.

firebase@12.19.0

Minor Changes

  • 6b17ef5 #10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash

Patch Changes

@​firebase/analytics@​0.10.25

Patch Changes

  • 50213a1 #10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

@​firebase/analytics-compat@​0.2.31

Patch Changes

  • Updated dependencies [50213a1]:
  • @​firebase/analytics@​0.10.25

@​firebase/app@​0.16.2

Patch Changes

  • Update SDK_VERSION.

... (truncated)

Commits

Updates lucide-react from 1.34.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

... (truncated)

Commits
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • See full diff in compare view

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

  • Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
    • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
    • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Documentation

Other

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 511d68a tailwind-merge@3.7.0
  • 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
  • 9d41508 add changelog for tailwind-merge@3.7.0
  • c78a80f Configurator: Reuse runtime lookups during pruning
  • 49c317d Monorepo: Fix contributing link and include package coverage
  • 7b565ca Configurator: prune a generated config to a project's used classes (core step)
  • d83e013 Releases: auto-re-pin tag-pinned links on every version bump
  • b71fd41 Docs: pin every in-repo file link to a release tag instead of main
  • ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
  • 9521b10 Releases: per-package pipeline with namespaced tags
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated several underlying packages to newer versions.

Bumps the runtime group with 4 updates in the / directory: [@sentry/nextjs](https://github.com/getsentry/sentry-javascript), [firebase](https://github.com/firebase/firebase-js-sdk), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) and [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge).


Updates `@sentry/nextjs` from 10.74.0 to 10.76.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.76.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.74.0...10.76.0)

Updates `firebase` from 12.18.0 to 12.19.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.18.0...firebase@12.19.0)

Updates `lucide-react` from 1.34.0 to 1.52.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/lucide-react)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

---
updated-dependencies:
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: firebase
  dependency-version: 12.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: lucide-react
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area: dependencies Pull requests that update a dependency file type: maintenance Refactoring, upgrades, housekeeping labels Oct 8, 2026
@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 82b08387-b1e2-48cb-a268-e6205a396fcc
📥 Commits

Reviewing files that changed from the base of the PR and between ca212a8 and acb4e86.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 7aa81401-d982-4ced-8c46-10a5ae102bef
📥 Commits

Reviewing files that changed from the base of the PR and between d6af43b and ca212a8.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

📝 Walkthrough

Walkthrough

Four dependency version ranges in package.json are updated. No other dependencies in the listed range change.

Changes

Dependency Version Updates

Layer / File(s) Summary
Update dependency version ranges
package.json
The version ranges for @sentry/nextjs, firebase, lucide-react, and tailwind-merge are updated.

Suggested reviewers: spizeck

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to ca212

The dependency ranges and lockfile are synchronized, with no concrete install or runtime failure identified. The update is low risk and can merge after normal checks.

Architecture Summary

Architecture risk: 🔵 Low · up to ca212

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in package.json: Updated the version ranges for @sentry/nextjs, firebase, lucide-react, and tailwind-merge; the other dependencies in this range are unchanged.
🚥 Pre-merge checks | ✅ 4
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately identifies a grouped runtime dependency update affecting four updates in one directory.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 13, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/runtime-1fcaad3390 branch October 13, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: dependencies Pull requests that update a dependency file type: maintenance Refactoring, upgrades, housekeeping

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant