Skip to content

Update all non-major dependencies#377

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#377
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 30, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@sentry/vue (source) 10.46.0 → 10.48.0 age confidence dependencies minor
axios (source) 1.13.6 → 1.15.0 age confidence dependencies minor
celery (source, changelog) ==5.6.2 → ==5.6.3 age confidence project.dependencies patch
django (changelog) ==6.0.3 → ==6.0.4 age confidence project.dependencies patch
django-allauth (changelog) ==65.15.0 → ==65.15.1 age confidence project.dependencies patch
django-debug-toolbar (changelog) ==6.2.0 → ==6.3.0 age confidence project.optional-dependencies minor
django-guardian (changelog) ==3.3.0 → ==3.3.1 age confidence project.dependencies patch
djangorestframework (changelog) ==3.17.0 → ==3.17.1 age confidence project.dependencies patch
geoai-py ==0.35.0 → ==0.37.1 age confidence project.optional-dependencies minor
ipython ==9.11.0 → ==9.12.0 age confidence project.optional-dependencies minor
lodash (source) 4.17.23 → 4.18.1 age confidence dependencies minor
node 24.14.0 → 24.14.1 age confidence uses-with patch
node 24.14.0 → 24.14.1 age confidence patch
numpy (changelog) ==2.4.3 → ==2.4.4 age confidence project.dependencies patch
pmtiles 4.4.0 → 4.4.1 age confidence dependencies patch
proj4 (source) 2.20.4 → 2.20.8 age confidence dependencies patch
sentry-sdk (changelog) ==2.55.0 → ==2.57.0 age confidence project.dependencies minor
uvicorn (changelog) ==0.42.0 → ==0.44.0 age confidence project.dependencies minor
vue (source) 3.5.30 → 3.5.32 age confidence dependencies patch
vuetify (source) 3.12.3 → 3.12.5 age confidence dependencies patch
werkzeug (changelog) ==3.1.6 → ==3.1.8 age confidence project.optional-dependencies patch

Release Notes

getsentry/sentry-javascript (@​sentry/vue)

v10.48.0

Compare Source

v10.47.0

Compare Source

Important Changes

  • feat(node-core): Add OTLP integration for node-core/light (#​19729)

    Added otlpIntegration at @sentry/node-core/light/otlp for users who manage
    their own OpenTelemetry setup and want to send trace data to Sentry without
    adopting the full @sentry/node SDK.

    import { NodeTracerProvider } from '@​opentelemetry/sdk-trace-node';
import * as Sentry from '@​sentry/node-core/light';
import { otlpIntegration } from '@​sentry/node-core/light/otlp';

const provider = new NodeTracerProvider();
provider.register();

Sentry.init({
  dsn: '__DSN__',
  integrations: [
    otlpIntegration({
      // Export OTel spans to Sentry via OTLP (default: true)
      setupOtlpTracesExporter: true,
    }),
  ],
});

    The integration links Sentry errors to OTel traces and exports spans to Sentry via OTLP.

  • feat(node, bun): Add runtime metrics integrations for Node.js and Bun (#​19923, #​19979)

    New nodeRuntimeMetricsIntegration and bunRuntimeMetricsIntegration automatically collect runtime health metrics and send them to Sentry on a configurable interval (default: 30s). Collected metrics include memory (RSS, heap used/total), CPU utilization, event loop utilization, and process uptime. Node additionally collects event loop delay percentiles (p50, p99). Extra metrics like CPU time and external memory are available as opt-in.

    // Node.js
import * as Sentry from '@​sentry/node';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeRuntimeMetricsIntegration()],
});

// Bun
import * as Sentry from '@​sentry/bun';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.bunRuntimeMetricsIntegration()],
});

  • feat(core): Support embedding APIs in google-genai (#​19797)

    Adds instrumentation for the Google GenAI embedContent API, creating gen_ai.embeddings spans.

  • feat(browser): Add elementTimingIntegration for tracking element render and load times (#​19869)

    The new elementTimingIntegration captures Element Timing API data as Sentry metrics. It emits element_timing.render_time and element_timing.load_time distribution metrics for elements annotated with the elementtiming HTML attribute.

    import * as Sentry from '@​sentry/browser';

Sentry.init({
  dsn: '__DSN__',
  integrations: [Sentry.browserTracingIntegration(), Sentry.elementTimingIntegration()],
});
    <img src="hero.jpg" elementtiming="hero-image" />
Other Changes
  • feat(nuxt): Add middleware instrumentation compatibility for Nuxt 5 (#​19968)
  • feat(nuxt): Support parametrized SSR routes in Nuxt 5 (#​19977)
  • feat(solid): Add route parametrization for Solid Router (#​20031)
  • fix(core): Guard nullish response in supabase PostgREST handler (#​20033)
  • fix(node): Deduplicate sentry-trace and baggage headers on outgoing requests (#​19960)
  • fix(node): Ensure startNewTrace propagates traceId in OTel environments (#​19963)
  • fix(nuxt): Use virtual module for Nuxt pages data (SSR route parametrization) (#​20020)
  • fix(opentelemetry): Convert seconds timestamps in span.end() to milliseconds (#​19958)
  • fix(profiling): Disable profiling in worker threads (#​20040)
  • fix(react-router): Disable debug ID injection in Vite plugin to prevent double injection (#​19890)
  • refactor(browser): Reduce browser package bundle size (#​19856)
  • feat(deps): Bump OpenTelemetry dependencies (#​20046)
Internal Changes
  • chore: Add shared validate-pr composite action (#​20025)
  • chore: Update validate-pr action to latest version (#​20027)
  • chore(deps): Bump @​apollo/server from 5.4.0 to 5.5.0 (#​20007)
  • chore(deps): Bump amqplib from 0.10.7 to 0.10.9 (#​20000)
  • chore(deps): Bump srvx from 0.11.12 to 0.11.13 (#​20001)
  • chore(deps-dev): Bump node-forge from 1.3.2 to 1.4.0 (#​20012)
  • chore(deps-dev): Bump yaml from 2.8.2 to 2.8.3 (#​19985)
  • ci(deps): Bump actions/upload-artifact from 6 to 7 (#​19569)
  • docs(release): Update publishing-a-release.md (#​19982)
  • feat(deps): Bump babel-loader from 10.0.0 to 10.1.1 (#​19997)
  • feat(deps): Bump handlebars from 4.7.7 to 4.7.9 (#​20008)
  • fix(browser-tests): Pin axios to 1.13.5 to avoid compromised 1.14.1 (#​20047)
  • fix(ci): Update validate-pr action to remove draft enforcement (#​20035)
  • fix(ci): Update validate-pr action to remove draft enforcement (#​20037)
  • fix(e2e): Pin @​opentelemetry/api to 1.9.0 in ts3.8 test app (#​19992)
  • ref(browser-tests): Add waitForMetricRequest helper (#​20002)
  • ref(core): Consolidate getOperationName into one shared utility (#​19971)
  • ref(core): Introduce instrumented method registry for AI integrations (#​19981)
  • test(deno): Expand Deno E2E test coverage (#​19957)
  • test(e2e): Add e2e tests for nodeRuntimeMetricsIntegration (#​19989)

Bundle size 📦

Path Size
@​sentry/browser 25.04 KB
@​sentry/browser - with treeshaking flags 23.57 KB
@​sentry/browser (incl. Tracing) 41.16 KB
@​sentry/browser (incl. Tracing, Profiling) 45.67 KB
@​sentry/browser (incl. Tracing, Replay) 79.04 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.91 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 83.64 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 95.62 KB
@​sentry/browser (incl. Feedback) 41.42 KB
@​sentry/browser (incl. sendFeedback) 29.59 KB
@​sentry/browser (incl. FeedbackAsync) 34.46 KB
@​sentry/browser (incl. Metrics) 26.32 KB
@​sentry/browser (incl. Logs) 26.46 KB
@​sentry/browser (incl. Metrics & Logs) 27.12 KB
@​sentry/react 26.76 KB
@​sentry/react (incl. Tracing) 43.44 KB
@​sentry/vue 29.37 KB
@​sentry/vue (incl. Tracing) 43.02 KB
@​sentry/svelte 25.06 KB
CDN Bundle 27.65 KB
CDN Bundle (incl. Tracing) 42.09 KB
CDN Bundle (incl. Logs, Metrics) 28.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 43.12 KB
CDN Bundle (incl. Replay, Logs, Metrics) 66.87 KB
CDN Bundle (incl. Tracing, Replay) 78.13 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 79.14 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 83.54 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 84.55 KB
CDN Bundle - uncompressed 80.72 KB
CDN Bundle (incl. Tracing) - uncompressed 124.81 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 84.77 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 128.14 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 204.87 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 238.95 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 242.26 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 251.56 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 254.86 KB
@​sentry/nextjs (client) 45.79 KB
@​sentry/sveltekit (client) 41.62 KB
@​sentry/node-core 54.45 KB
@​sentry/node 168.93 KB
@​sentry/node - without tracing 93.76 KB
@​sentry/aws-serverless 110.13 KB
axios/axios (axios)

v1.15.0

Compare Source

Bug Fixes
Features
  • fomdata: added support for spec-compliant FormData & Blob types; (#​5316) (6ac574e)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.6 (2023-01-28)

Bug Fixes
  • headers: added missed Authorization accessor; (#​5502) (342c0ba)
  • types: fixed CommonRequestHeadersList & CommonResponseHeadersList types to be private in commonJS; (#​5503) (5a3d0a3)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.5 (2023-01-26)

Bug Fixes
  • types: fixed AxiosHeaders to handle spread syntax by making all methods non-enumerable; (#​5499) (580f1e8)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.4 (2023-01-22)

Bug Fixes
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

1.2.3 (2023-01-10)

Bug Fixes
  • types: fixed AxiosRequestConfig header interface by refactoring it to RawAxiosRequestConfig; (#​5420) (0811963)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.2.2] - 2022-12-29

Fixed
Chores
  • chore(ci): set conventional-changelog header config #​5406
  • chore(ci): fix automatic contributors resolving #​5403
  • chore(ci): improved logging for the contributors list generator #​5398
  • chore(ci): fix release action #​5397
  • chore(ci): fix version bump script by adding bump argument for target version #​5393
  • chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 #​5342
  • chore(ci): GitHub Actions Release script #​5384
  • chore(ci): release scripts #​5364
Contributors to this release

[1.2.1] - 2022-12-05

Changed
  • feat(exports): export mergeConfig #​5151
Fixed
  • fix(CancelledError): include config #​4922
  • fix(general): removing multiple/trailing/leading whitespace #​5022
  • fix(headers): decompression for responses without Content-Length header #​5306
  • fix(webWorker): exception to sending form data in web worker #​5139
Refactors
  • refactor(types): AxiosProgressEvent.event type to any #​5308
  • refactor(types): add missing types for static AxiosError.from method #​4956
Chores
  • chore(docs): remove README link to non-existent upgrade guide #​5307
  • chore(docs): typo in issue template name #​5159
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.2.0] - 2022-11-10

Changed
  • changed: refactored module exports #​5162
  • change: re-added support for loading Axios with require('axios').default #​5225
Fixed
  • fix: improve AxiosHeaders class #​5224
  • fix: TypeScript type definitions for commonjs #​5196
  • fix: type definition of use method on AxiosInterceptorManager to match the the README #​5071
  • fix: __dirname is not defined in the sandbox #​5269
  • fix: AxiosError.toJSON method to avoid circular references #​5247
  • fix: Z_BUF_ERROR when content-encoding is set but the response body is empty #​5250
Refactors
  • refactor: allowing adapters to be loaded by name #​5277
Chores
  • chore: force CI restart #​5243
  • chore: update ECOSYSTEM.md #​5077
  • chore: update get/index.html #​5116
  • chore: update Sandbox UI/UX #​5205
  • chore:(actions): remove git credentials after checkout #​5235
  • chore(actions): bump actions/dependency-review-action from 2 to 3 #​5266
  • chore(packages): bump loader-utils from 1.4.1 to 1.4.2 #​5295
  • chore(packages): bump engine.io from 6.2.0 to 6.2.1 #​5294
  • chore(packages): bump socket.io-parser from 4.0.4 to 4.0.5 #​5241
  • chore(packages): bump loader-utils from 1.4.0 to 1.4.1 #​5245
  • chore(docs): update Resources links in README #​5119
  • chore(docs): update the link for JSON url #​5265
  • chore(docs): fix broken links #​5218
  • chore(docs): update and rename UPGRADE_GUIDE.md to MIGRATION_GUIDE.md #​5170
  • chore(docs): typo fix line #​856 and #​920 #​5194
  • chore(docs): typo fix #​800 #​5193
  • chore(docs): fix typos #​5184
  • chore(docs): fix punctuation in README.md #​5197
  • chore(docs): update readme in the Handling Errors section - issue reference #​5260 #​5261
  • chore: remove \b from filename #​5207
  • chore(docs): update CHANGELOG.md #​5137
  • chore: add sideEffects false to package.json #​5025
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.3] - 2022-10-15

Added
  • Added custom params serializer support #​5113
Fixed
  • Fixed top-level export to keep them in-line with static properties #​5109
  • Stopped including null values to query string. #​5108
  • Restored proxy config backwards compatibility with 0.x #​5097
  • Added back AxiosHeaders in AxiosHeaderValue #​5103
  • Pin CDN install instructions to a specific version #​5060
  • Handling of array values fixed for AxiosHeaders #​5085
Chores
  • docs: match badge style, add link to them #​5046
  • chore: fixing comments typo #​5054
  • chore: update issue template #​5061
  • chore: added progress capturing section to the docs; #​5084
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.2] - 2022-10-07

Fixed
  • Fixed broken exports for UMD builds.
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.1] - 2022-10-07

Fixed
  • Fixed broken exports for common js. This fix breaks a prior fix, I will fix both issues ASAP but the commonJS use is more impactful.
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.1.0] - 2022-10-06

Fixed
  • Fixed missing exports in type definition index.d.ts #​5003
  • Fixed query params composing #​5018
  • Fixed GenericAbortSignal interface by making it more generic #​5021
  • Fixed adding "clear" to AxiosInterceptorManager #​5010
  • Fixed commonjs & umd exports #​5030
  • Fixed inability to access response headers when using axios 1.x with Jest #​5036
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[1.0.0] - 2022-10-04

Added
  • Added stack trace to AxiosError #​4624
  • Add AxiosError to AxiosStatic #​4654
  • Replaced Rollup as our build runner #​4596
  • Added generic TS types for the exposed toFormData helper #​4668
  • Added listen callback function #​4096
  • Added instructions for installing using PNPM #​4207
  • Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill #​4229
  • Added axios-url-template in ECOSYSTEM.md #​4238
  • Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an axios instance #​4248
  • Added react hook plugin #​4319
  • Adding HTTP status code for transformResponse #​4580
  • Added blob to the list of protocols supported by the browser #​4678
  • Resolving proxy from env on redirect #​4436
  • Added enhanced toFormData implementation with additional options 4704
  • Adding Canceler parameters config and request #​4711
  • Added automatic payload serialization to application/x-www-form-urlencoded #​4714
  • Added the ability for webpack users to overwrite built-ins #​4715
  • Added string[] to AxiosRequestHeaders type #​4322
  • Added the ability for the url-encoded-form serializer to respect the formSerializer config #​4721
  • Added isCancel type assert #​4293
  • Added data URL support for node.js #​4725
  • Adding types for progress event callbacks #​4675
  • URL params serializer #​4734
  • Added axios.formToJSON method #​4735
  • Bower platform add data protocol #​4804
  • Use WHATWG URL API instead of url.parse() #​4852
  • Add ENUM containing Http Status Codes to typings #​4903
  • Improve typing of timeout in index.d.ts #​4934
Changed
  • Updated AxiosError.config to be optional in the type definition #​4665
  • Updated README emphasizing the URLSearchParam built-in interface over other solutions #​4590
  • Include request and config when creating a CanceledError instance #​4659
  • Changed func-names eslint rule to as-needed #​4492
  • Replacing deprecated substr() with slice() as substr() is deprecated #​4468
  • Updating HTTP links in README.md to use HTTPS #​4387
  • Updated to a better trim() polyfill #​4072
  • Updated types to allow specifying partial default headers on instance create #​4185
  • Expanded isAxiosError types #​4344
  • Updated type definition for axios instance methods #​4224
  • Updated eslint config #​4722
  • Updated Docs #​4742
  • Refactored Axios to use ES2017 #​4787
Deprecated
  • There are multiple deprecations, refactors and fixes provided in this release. Please read through the full release notes to see how this may impact your project and use case.
Removed
  • Removed incorrect argument for NetworkError constructor #​4656
  • Removed Webpack #​4596
  • Removed function that transform arguments to array #​4544
Fixed
  • Fixed grammar in README #​4649
  • Fixed code error in README #​4599
  • Optimized the code that checks cancellation #​4587
  • Fix url pointing to defaults.js in README #​4532
  • Use type alias instead of interface for AxiosPromise #​4505
  • Fix some word spelling and lint style in code comments #​4500
  • Edited readme with 3 updated browser icons of Chrome, FireFox and Safari #​4414
  • Bump follow-redirects from 1.14.9 to 1.15.0 #​4673
  • Fixing http tests to avoid hanging when assertions fail #​4435
  • Fix TS definition for AxiosRequestTransformer #​4201
  • Fix grammatical issues in README #​4232
  • Fixing instance.defaults.headers type #​4557
  • Fixed race condition on immediate requests cancellation #​4261
  • Fixing Z_BUF_ERROR when no content #​4701
  • Fixing proxy beforeRedirect regression #​4708
  • Fixed AxiosError status code type #​4717
  • Fixed AxiosError stack capturing #​4718
  • Fixing AxiosRequestHeaders typings #​4334
  • Fixed max body length defaults #​4731
  • Fixed toFormData Blob issue on node>v17 #​4728
  • Bump grunt from 1.5.2 to 1.5.3 #​4743
  • Fixing content-type header repeated #​4745
  • Fixed timeout error message for http 4738
  • Request ignores false, 0 and empty string as body values #​4785
  • Added back missing minified builds #​4805
  • Fixed a type error #​4815
  • Fixed a regression bug with unsubscribing from cancel token; #​4819
  • Remove repeated compression algorithm #​4820
  • The error of calling extend to pass parameters #​4857
  • SerializerOptions.indexes allows boolean | null | undefined #​4862
  • Require interceptors to return values #​4874
  • Removed unused imports #​4949
  • Allow null indexes on formSerializer and paramsSerializer #​4960
Chores
  • Set permissions for GitHub actions #​4765
  • Included githubactions in the dependabot config #​4770
  • Included dependency review #​4771
  • Update security.md #​4784
  • Remove unnecessary spaces #​4854
  • Simplify the import path of AxiosError #​4875
  • Fix Gitpod dead link #​4941
  • Enable syntax highlighting for a code block #​4970
  • Using Logo Axios in Readme.md #​4993
  • Fix markup for note in README #​4825
  • Fix typo and formatting, add colons #​4853
  • Fix typo in readme #​4942
Security
Contributors to this release

v1.14.0

Compare Source

celery/celery (celery)

v5.6.3

Compare Source

What's Changed

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Mar 30, 2026 •
edited
Loading

Deploying geodatalytics with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6969faf
Status: ✅  Deploy successful!
Preview URL: https://f33e26e6.geodatalytics.pages.dev
Branch Preview URL: https://renovate-all-minor-patch.geodatalytics.pages.dev

View logs

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 2bb1919 to e2fc032 Compare April 6, 2026 09:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e27714b to 7dcafe1 Compare April 7, 2026 20:58
@renovate renovate bot changed the title fix(deps): update all non-major dependencies Update all non-major dependencies Apr 8, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from b0f4b82 to 8dfff61 Compare April 11, 2026 20:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8dfff61 to 6969faf Compare April 12, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants