Skip to content

Bump the npm-all group across 1 directory with 6 updates#54

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-all-cdf1cbaf32
Open

Bump the npm-all group across 1 directory with 6 updates#54
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-all-cdf1cbaf32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-all group with 6 updates in the / directory:

Package From To
@sentry/vue 10.53.1 10.67.0
markdown-it 14.1.1 14.3.0
marked 18.0.3 18.0.6
vue 3.5.34 3.5.40
vitepress 2.0.0-alpha.17 2.0.0-alpha.18
vuetify 4.0.7 4.1.5

Updates @sentry/vue from 10.53.1 to 10.67.0

Release notes

Sourced from @​sentry/vue's releases.

10.67.0

Important Changes

  • feat(sveltekit): Add support for SvelteKit 3 (#22264)

    The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.

Other Changes

  • feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in (#22143)
  • feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation (#22126)
  • feat(cloudflare): Instrument Cloudflare rate limiter bindings (#22035)
  • feat(core): Instrument workers-ai-provider (#22119)
  • feat(core): Rename queryParams to urlQueryParams (#22217)
  • feat(mongodb): implement orchestrion mongodb integration (#22308)
  • feat(mongoose): implement orchestrion mongoose integration (#22202)
  • feat(node): Rewrite tedious instrumentation to orchestrion tracing channels (#22238)
  • feat(nuxt): Add _experimental.useDiagnosticsChannelInjection (#22323)
  • feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • feat(replay): Allow skipping the final flush on stop() via { flush: false } (#22300)
  • feat(server-utils): Add @​opentelemetry/instrumentation-koa orchestrion integration (#22146)
  • feat(server-utils): Add orchestrion aws-sdk channel integration core (#22142)
  • feat(server-utils): Allow passing custom transforms to orchestrion (#22319)
  • feat(server-utils): Port Bedrock aws-sdk extension and add integration tests (#22166)
  • feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions (#22164)
  • feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation (#22165)
  • feat(server-utils): Rewrite SentryLangChainInstrumentation to orchestrion (#22266)
  • feat(server-utils): Rewrite SentryLangGraphInstrumentation to orchestrion (#22268)
  • feat(vue): Set navigation.route.id from the route name (#22372)
  • fix(bundler): do not import type from optional peer dep (#22304)
  • fix(cloudflare): Bind Durable Object built-in handlers (#22340)
  • fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods (#22310)
  • fix(cloudflare): Route DO teardown through original waitUntil (#22339)
  • fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries (#22376)
  • fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms (#22273)
  • fix(core): Prevent infinite recursion when console is instrumented twice (#21959)
  • fix(nextjs): Mark internal chunk frames as not in_app (#22354)
  • fix(node): Register tracer provider when OTel API global pre-exists with a different version (#22374)
  • fix(node-native): Don't drop breadcrumbs from event loop block events (#22322)
  • fix(serve-rutils): Orchestrion diagnostics for async and require (#22327)
  • fix(server-utils): Only skip loader thread (#22336)
  • fix(sveltekit): Detect SvelteKit server build via Vite Environment API (#21629)
  • fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode (#22293)
  • fix(vue): Support pinia 4 in peer dependency range (#22324)
  • chore: Add external contributor to CHANGELOG.md (#22357)
  • chore: Add external contributor to CHANGELOG.md (#22359)

... (truncated)

Changelog

Sourced from @​sentry/vue's changelog.

10.67.0

Important Changes

  • feat(sveltekit): Add support for SvelteKit 3 (#22264)

    The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.

Other Changes

  • feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in (#22143)
  • feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation (#22126)
  • feat(cloudflare): Instrument Cloudflare rate limiter bindings (#22035)
  • feat(core): Instrument workers-ai-provider (#22119)
  • feat(core): Rename queryParams to urlQueryParams (#22217)
  • feat(mongodb): implement orchestrion mongodb integration (#22308)
  • feat(mongoose): implement orchestrion mongoose integration (#22202)
  • feat(node): Rewrite tedious instrumentation to orchestrion tracing channels (#22238)
  • feat(nuxt): Add _experimental.useDiagnosticsChannelInjection (#22323)
  • feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • feat(replay): Allow skipping the final flush on stop() via { flush: false } (#22300)
  • feat(server-utils): Add @​opentelemetry/instrumentation-koa orchestrion integration (#22146)
  • feat(server-utils): Add orchestrion aws-sdk channel integration core (#22142)
  • feat(server-utils): Allow passing custom transforms to orchestrion (#22319)
  • feat(server-utils): Port Bedrock aws-sdk extension and add integration tests (#22166)
  • feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions (#22164)
  • feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation (#22165)
  • feat(server-utils): Rewrite SentryLangChainInstrumentation to orchestrion (#22266)
  • feat(server-utils): Rewrite SentryLangGraphInstrumentation to orchestrion (#22268)
  • feat(vue): Set navigation.route.id from the route name (#22372)
  • fix(bundler): do not import type from optional peer dep (#22304)
  • fix(cloudflare): Bind Durable Object built-in handlers (#22340)
  • fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods (#22310)
  • fix(cloudflare): Route DO teardown through original waitUntil (#22339)
  • fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries (#22376)
  • fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms (#22273)
  • fix(core): Prevent infinite recursion when console is instrumented twice (#21959)
  • fix(nextjs): Mark internal chunk frames as not in_app (#22354)
  • fix(node): Register tracer provider when OTel API global pre-exists with a different version (#22374)
  • fix(node-native): Don't drop breadcrumbs from event loop block events (#22322)
  • fix(serve-rutils): Orchestrion diagnostics for async and require (#22327)
  • fix(server-utils): Only skip loader thread (#22336)
  • fix(sveltekit): Detect SvelteKit server build via Vite Environment API (#21629)
  • fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode (#22293)
  • fix(vue): Support pinia 4 in peer dependency range (#22324)
  • chore: Add external contributor to CHANGELOG.md (#22357)

... (truncated)

Commits
  • a88e286 release: 10.67.0
  • db27830 Merge pull request #22382 from getsentry/prepare-release/10.67.0
  • 3c20967 meta(changelog): Update changelog for 10.67.0
  • ee99468 feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation ...
  • 55bd48a feat(core): Instrument workers-ai-provider (#22119)
  • c47b449 chore(ci): Use openrouter keys for claude in ci (#22381)
  • 326fbc9 fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL querie...
  • 8e20a26 feat(vue): Set navigation.route.id from the route name (#22372)
  • e47e5d8 feat(remix): Add orchestrion-based remix instrumentation (#22244)
  • 1e26f76 feat(mongodb): implement orchestrion mongodb integration (#22308)
  • Additional commits viewable in compare view

Updates markdown-it from 14.1.1 to 14.3.0

Changelog

Sourced from markdown-it's changelog.

[14.3.0] - 2026-07-02

Changed

  • Reworked build pipeline & tools.
  • Added source maps.
  • Bumped linkify-it to 5.0.2.

Fixed

  • Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.

[14.2.0] - 2026-05-24

Added

  • isPunctCharCode to utilities.

Fixed

  • Don't end HTML comment blocks on a blank line, #1155.
  • Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
  • Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
  • More strict entities decode to avoid false positives ;, #1096.
  • Restore block parser state on fail in lheading rule, #1131.

Security

  • Fixed poor smartquotes perfomance on > 70k quotes in single block
  • Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.
Commits
  • ff0ee08 14.3.0 released
  • 52e2749 Bump linkify-it / vite deps
  • 56c2404 fix: keep backslash-space hard line break (CommonMark 6.7) (#1185)
  • 0fbb18b Bump vite from 8.0.14 to 8.0.16 (#1181)
  • 83450e2 Rework benchmark deps and bump versions
  • 57a6863 benchmark => tinybench
  • 7608db1 Update CI config
  • 9d8eb42 Added package-lock and updated versions to latest possible
  • 0aee70d lint: enable @​stylistic/no-multi-spaces rule
  • 8878985 lint => neostandard
  • Additional commits viewable in compare view

Updates marked from 18.0.3 to 18.0.6

Release notes

Sourced from marked's releases.

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

  • Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
  • Fix ordered lists after blockquotes (#4003) (33928d0)
  • keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

  • parse empty list item with trailing space (#3984) (b55410f)

v18.0.4

18.0.4 (2026-05-19)

Bug Fixes

Commits
  • 39bd884 chore(release): 18.0.6 [skip ci]
  • 6bce57d chore(deps-dev): bump @​semantic-release/github from 12.0.8 to 12.0.9 (#4009)
  • 63a4bba chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.0 (#4010)
  • a009808 fix: Avoid O(n^2) backtracking in inline link href regex (#4013)
  • 33928d0 fix: Fix ordered lists after blockquotes (#4003)
  • bbb84c8 fix: keep trailing text on HTML block close line for PI, declarations, and CD...
  • d2af54e chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (#4005)
  • f403898 chore(deps-dev): bump @​arethetypeswrong/cli from 0.18.3 to 0.18.4 (#4006)
  • f8f4112 chore(deps): bump actions/checkout from 6 to 7 (#4000)
  • 5ddfd8a chore: Update repository metadata URLs (#3998)
  • Additional commits viewable in compare view

Updates vue from 3.5.34 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.38

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.37

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

3.5.39 (2026-06-25)

Bug Fixes

3.5.38 (2026-06-11)

3.5.37 (2026-06-11)

3.5.36 (2026-06-11)

Bug Fixes

  • compiler-core: avoid crash on CDATA at the document root (#14916) (0ea17e2)
  • compiler-core: prefix dynamic keys on v-memo elements (#14922) (68e978e), closes #14920
  • compiler-sfc: handle vue-ignore on leading intersection/union type (#14950) (0dcd225), closes #12254
  • compiler-sfc: respect var hoisting in props destructure (48ad452)
  • reactivity: preserve watch callback return value when wrapped for once: true (#14902) (450a8a8)
  • runtime-core: add dev warning for silent catch in compat mode and fix test description typo (#14891) (db3e117)

... (truncated)

Commits

Updates vitepress from 2.0.0-alpha.17 to 2.0.0-alpha.18

Release notes

Sourced from vitepress's releases.

v2.0.0-alpha.18

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vitepress's changelog.

2.0.0-alpha.18 (2026-07-06)

Bug Fixes

  • build: apply base to links with download attribute (#5186) (01987c4)
  • build: normalize rewrite drive letters (#5245) (5c50b99)
  • build: show dead link line numbers (#5230) (c37bde6)
  • compose markdown config when extending configs (#5236) (04f4fba)
  • delete undefined values while merging sidepanel props (cc30b10)
  • disable pluginTimings and invalidAnnotation for now (9315fc1)
  • don't invalidate framework chunk when a new asset is added (c0e2e18)
  • escape description in head (d96bf1d)
  • index rewritten local search pages by locale (#5241) (80cf265)
  • keep translation links in the current tab (#5158) (202ee70)
  • normalize /index to / (856858d), closes #5165
  • preserve Agent Studio DocSearch options (#5254) (f29ffdb)
  • preserve external sidebar links with base (#5243) (ddf178a)
  • prevent DocSearch SVG clipping in WebKit (#5240) (a357e5e)
  • strip frontmatter before heading includes (#5246) (e68fade)
  • theme: avatars misaligned in team member cards (6730fb8), closes #5160
  • theme: correct mixed LTR/RTL text rendering in code blocks (73f7b0b)
  • theme: keep external link icon inline (#5232) (756a88c)
  • theme: prevent sub and sup elements from affecting line height (19357f9), closes #5173
  • use resolveDynamicComponent instead of resolveComponent (9da1e3e)

Features

  • add macOS local search navigation shortcuts (#5237) (e635e9e)
  • add support for format option in Carbon options (#5188) (6ee01bf)
  • allow custom i18n routing (#5239) (eef5742)
  • allow VPContent to use custom components (#5176) (c0b38d5)
  • markdown: expose Shiki color replacements in markdown options (#5153) (fccc617)
  • migrate to vite 8 (228eef1)
  • show local search loading state (#5252) (7e2273a)
  • support scroll-margin / scroll-padding (6cce766)
  • support social link target option (#5242) (d0159c8)

BREAKING CHANGES

  • VitePress now uses Vite 8. If you are using Vite plugins in your config, please check the Vite 8 migration guide for any breaking changes that may affect you.
  • Node 20 support is dropped. v22 or higher is needed.
  • scrollOffset from config is removed. Users wanting to customize scroll offset should customize scroll-margin-top via CSS instead. smoothScroll support from router.go is also removed as it didn't work as expected for most users. Users wanting smooth scrolling should set scroll-behavior: smooth in CSS, ideally inside a @media (prefers-reduced-motion: no-preference) block.
Commits
  • ca57890 release: v2.0.0-alpha.18
  • 9315fc1 fix: disable pluginTimings and invalidAnnotation for now
  • 470c4e0 refactor: clean up types
  • c0e2e18 fix: don't invalidate framework chunk when a new asset is added
  • 1ade7bd refactor: migrate scripts to typescript and organize imports
  • e6e90ed refactor: drop fs-extra and organize imports
  • 228eef1 feat!: migrate to vite 8
  • 7e2273a feat: show local search loading state (#5252)
  • 0100d4d docs: clarify Ask AI suggested questions (#5248)
  • cc30b10 fix: delete undefined values while merging sidepanel props
  • Additional commits viewable in compare view

Updates vuetify from 4.0.7 to 4.1.5

Release notes

Sourced from vuetify's releases.

v4.1.5

[!IMPORTANT] Vuetify Needs Your Support! The OpenCollective funds dried up. We are currently unable to compensate our contributors for their continued work on the framework and the ecosystem tools.

If Vuetify is part of your stack, please consider sponsoring the project so we can continue delivering updates and fixes.

Sponsor via Open Collective

Even if you look with optimism into the future (despite the sad economic reality), it is not responsible to keep your largest open source dependency in this poor financial state. Vuetify is on the borrowed time - if anything happens to maintainers primary employment, they are more likely to drop off.

Every contribution helps us keep Vuetify alive and signals to maintainers that their effort is appreciated.

Thank you.


🔧 Bug Fixes

  • types: preserve RouteLocationRaw in emitted declarations (d4d7b4b), closes #22615
  • VCalendar: prevent next day hours when customizing intervals (4e36892)
  • VCalendar: add missing interval props (#23000) (d1f6f96), closes #22718
  • VDataTable: hide empty header cell in mobile view (a759055)
  • VOverlay: skip click-outside DOM scan for inactive overlays (74e297f), closes #22995
  • VSwitch: resolve inset thumb scale ratios in Sass (86fcfaa), closes #23004
  • VTreeview: search should match reactive nodes when using return-object (#22640) (1e92d74), closes #22533

🧪 Labs

v4.1.4

🔧 Bug Fixes

  • date: correct locale on StringDateAdapter (83ed8d4)
  • theme: provideTheme current should use computedThemes (#22987) (998fe6a), closes #22986
  • VDateInput: do not fill range on blur (b7569fe), closes #22984
  • VMenu: correct close cascade for nested menus (5902e09), closes #20003 #21606 #22227
  • VMenu: correct click-outside detection when content resizes (007f546), closes #22488
  • VNumberInput: accept non-ASCII minus sign (6063d7a), closes #22988
  • VNumberInput: keep all decimals when precision is null (87b0e57), closes #22990

v4.1.3

🔧 Bug Fixes

  • rounded: translate 2xl, 3xl, etc. to classes (0ea03f4), closes #22978
  • VAutocomplete: don't trigger keydown listener during IME composition (#22974) (c1ef7fa)
  • VDataTable: keep rows visible after hiding a column with a custom filter (#22971) (aea8e77), closes #22863
  • VDataTable: apply text-align to columns with align 'start' (02f5f81), closes #22979
  • VDateInput: derive display format from date adapter locale (#22976) (962cda0)

... (truncated)

Commits
  • a9421c6 chore(release): publish v4.1.5
  • 4e36892 fix(VCalendar): prevent next day hours when customizing intervals
  • d1f6f96 fix(VCalendar): add missing interval props (#23000)
  • a759055 fix(VDataTable): hide empty header cell in mobile view
  • 1e92d74 fix(VTreeview): search should match reactive nodes when using return-object (...
  • 9d9dc34 fix(VMaskInput): preserve value when pasting over a selection (#23003)
  • d4d7b4b fix(types): preserve RouteLocationRaw in emitted declarations
  • 86fcfaa fix(VSwitch): resolve inset thumb scale ratios in Sass
  • 74e297f fix(VOverlay): skip click-outside DOM scan for inactive overlays
  • 80a7d6e chore(release): publish v4.1.4
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
Bumps the npm-all group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/vue](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.67.0` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.1` | `14.3.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.3` | `18.0.6` |
| [vue](https://github.com/vuejs/core) | `3.5.34` | `3.5.40` |
| [vitepress](https://github.com/vuejs/vitepress) | `2.0.0-alpha.17` | `2.0.0-alpha.18` |
| [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) | `4.0.7` | `4.1.5` |



Updates `@sentry/vue` from 10.53.1 to 10.67.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.53.1...10.67.0)

Updates `markdown-it` from 14.1.1 to 14.3.0
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.1.1...14.3.0)

Updates `marked` from 18.0.3 to 18.0.6
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.3...v18.0.6)

Updates `vue` from 3.5.34 to 3.5.40
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.34...v3.5.40)

Updates `vitepress` from 2.0.0-alpha.17 to 2.0.0-alpha.18
- [Release notes](https://github.com/vuejs/vitepress/releases)
- [Changelog](https://github.com/vuejs/vitepress/blob/main/CHANGELOG.md)
- [Commits](vuejs/vitepress@v2.0.0-alpha.17...v2.0.0-alpha.18)

Updates `vuetify` from 4.0.7 to 4.1.5
- [Release notes](https://github.com/vuetifyjs/vuetify/releases)
- [Commits](https://github.com/vuetifyjs/vuetify/commits/v4.1.5/packages/vuetify)

---
updated-dependencies:
- dependency-name: "@sentry/vue"
  dependency-version: 10.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: markdown-it
  dependency-version: 14.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: marked
  dependency-version: 18.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: vitepress
  dependency-version: 2.0.0-alpha.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: vue
  dependency-version: 3.5.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: vuetify
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-all-cdf1cbaf32 branch from 57a5d0f to a115395 Compare July 20, 2026 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants