chore(deps): bump the npm_and_yarn group across 2 directories with 32 updates #9

dependabot · 2025-06-12T13:35:37Z

Bumps the npm_and_yarn group with 24 updates in the / directory:

Package	From	To
@sentry/browser	`7.8.1`	`7.119.1`
semver	`7.6.0`	`7.6.1`
dompurify	`3.0.6`	`3.2.4`
esbuild	`0.17.14`	`0.25.0`
express	`4.18.2`	`4.20.0`
happy-dom	`12.10.1`	`15.10.2`
http-proxy-middleware	`2.0.6`	`2.0.9`
vite	`4.5.2`	`4.5.14`
vitest	`1.0.0-beta.4`	`1.0.0-beta.5`
postcss	`8.4.35`	`8.4.36`
mermaid	`10.9.1`	`10.9.3`
@sveltejs/kit	`2.5.17`	`2.20.6`
svelte	`4.2.18`	`4.2.19`
rollup	`4.18.1`	`4.22.4`
@babel/helpers	`7.24.0`	`7.24.7`
brace-expansion	`1.1.11`	`1.1.12`
braces	`3.0.2`	`3.0.3`
ejs	`3.1.9`	`3.1.10`
http-cache-semantics	`4.1.0`	`4.2.0`
json5	`1.0.1`	`1.0.2`
serve-static	`1.15.0`	`1.16.2`
store2	`2.14.3`	`2.14.4`
undici	`5.22.1`	`5.29.0`
ws	`6.2.2`	`6.2.3`

Bumps the npm_and_yarn group with 5 updates in the /client/web-sveltekit directory:

Package	From	To
vite	`4.5.2`	`4.5.14`
vitest	`1.0.0-beta.4`	`1.0.0-beta.5`
mermaid	`10.9.1`	`10.9.3`
@sveltejs/kit	`2.5.17`	`2.20.6`
svelte	`4.2.18`	`4.2.19`

Updates @sentry/browser from 7.8.1 to 7.119.1

Release notes

Sourced from @sentry/browser's releases.

7.119.1

fix(browser/v7): Ensure wrap() only returns functions (#13838 backport)

Work in this release contributed by @legobeat. Thank you for your contribution!

7.119.0

backport(tracing): Report dropped spans for transactions (#13343)

Bundle size 📦

Path Size

@sentry/browser (incl. Tracing, Replay, Feedback) - Webpack (gzipped) 80.96 KB

@sentry/browser (incl. Tracing, Replay) - Webpack (gzipped) 71.89 KB

@sentry/browser (incl. Tracing, Replay with Canvas) - Webpack (gzipped) 76.14 KB

@sentry/browser (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped) 65.52 KB

@sentry/browser (incl. Tracing) - Webpack (gzipped) 35.77 KB

@sentry/browser (incl. browserTracingIntegration) - Webpack (gzipped) 35.66 KB

@sentry/browser (incl. Feedback) - Webpack (gzipped) 31.71 KB

@sentry/browser (incl. sendFeedback) - Webpack (gzipped) 31.72 KB

@sentry/browser - Webpack (gzipped) 22.91 KB

@sentry/browser (incl. Tracing, Replay, Feedback) - ES6 CDN Bundle (gzipped) 79.17 KB

@sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (gzipped) 70.49 KB

@sentry/browser (incl. Tracing) - ES6 CDN Bundle (gzipped) 36.17 KB

@sentry/browser - ES6 CDN Bundle (gzipped) 25.41 KB

@sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (minified & uncompressed) 221.92 KB

@sentry/browser (incl. Tracing) - ES6 CDN Bundle (minified & uncompressed) 109.52 KB

@sentry/browser - ES6 CDN Bundle (minified & uncompressed) 76.24 KB

@sentry/browser (incl. Tracing) - ES5 CDN Bundle (gzipped) 39.45 KB

@sentry/react (incl. Tracing, Replay) - Webpack (gzipped) 72.4 KB

@sentry/react - Webpack (gzipped) 22.94 KB

@sentry/nextjs Client (incl. Tracing, Replay) - Webpack (gzipped) 90.16 KB

@sentry/nextjs Client - Webpack (gzipped) 54.27 KB

@sentry-internal/feedback - Webpack (gzipped) 17.34 KB

Changelog

Sourced from @sentry/browser's changelog.

7.119.1

fix(browser/v7): Ensure wrap() only returns functions (#13838 backport)

Work in this release contributed by @legobeat. Thank you for your contribution!

7.119.0

backport(tracing): Report dropped spans for transactions (#13343)

7.118.0

fix(v7/bundle): Ensure CDN bundles do not overwrite window.Sentry (#12579)

7.117.0

feat(browser/v7): Publish browserprofling CDN bundle (#12224)

fix(v7/publish): Add v7 tag to @sentry/replay (#12304)

7.116.0

build(craft): Publish lambda layer under its own name for v7 (#12098) (#12099)

This release publishes a new AWS Lambda layer under the name SentryNodeServerlessSDKv7 that users still running v7 can use instead of pinning themselves to SentryNodeServerlessSDK:235.

7.115.0

feat(v7): Add support for global onUnhandled Error/Promise for Bun (#11959)

fix(replay/v7): Fix user activity not being updated in start() (#12003)

ref(api): Remove lastEventId deprecation warnings (#12042)

7.114.0

Important Changes

fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

build(aws-lambda/v7): Turn off lambda layer publishing (#11875)

feat(v7): Add tunnel support to multiplexed transport (#11851)

fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)

fix(react/v7): Fix react router v4/v5 span names (#11940)

... (truncated)

Commits

c8452e1 release: 7.119.1
5a88ff6 fix(browser/v7): Ensure wrap() only returns functions (#13838 backport) (#1...
5adcbf9 Merge branch 'release/7.119.0' into v7
f58bf69 release: 7.119.0
a6bc39f fix(ci): GH dropped macos-11 at the end of June 24 (#13360)
2060d84 meta(changelog): Update CHANGELOG.md for 7.119.0 (#13350)
f54c97a backport(tracing): Report dropped spans for transactions (#13343)
eeae3cf test(v7/loader): Update Loader Script to latest (#12765)
d3e2c7b meta(v7): Ignore pem for tests (#13051)
47f1710 Merge branch 'release/7.118.0' into v7
Additional commits viewable in compare view

Updates semver from 7.6.0 to 7.6.1

Release notes

Sourced from semver's releases.

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

Dependencies

988a8de #709 uninstall lru-cache (#709)

3fabe4d #704 remove lru-cache

Chores

dd09b60 #705 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)

ec49cdc #701 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)

b236c3d #696 add benchmarks (#696) (@H4ad)

692451b #688 various improvements to README (#688) (@mbtools)

5feeb7f #705 postinstall for dependabot template-oss PR (@lukekarrys)

074156f #701 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

Changelog

Sourced from semver's changelog.

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

Dependencies

988a8de #709 uninstall lru-cache (#709)

3fabe4d #704 remove lru-cache

Chores

dd09b60 #705 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)

ec49cdc #701 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)

b236c3d #696 add benchmarks (#696) (@H4ad)

692451b #688 various improvements to README (#688) (@mbtools)

5feeb7f #705 postinstall for dependabot template-oss PR (@lukekarrys)

074156f #701 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

Commits

d777418 chore: release 7.6.1 (#706)
988a8de deps: uninstall lru-cache (#709)
5feeb7f chore: postinstall for dependabot template-oss PR
dd09b60 chore: bump @npmcli/template-oss to 4.22.0
c570a34 fix(linting): no-unused-vars
ad8ff11 fix: use internal cache implementation
3fabe4d deps: remove lru-cache
ec49cdc chore: chore: chore: postinstall for dependabot template-oss PR
074156f chore: bump @npmcli/template-oss from 4.21.3 to 4.21.4
b236c3d chore: add benchmarks (#696)
Additional commits viewable in compare view

Updates dompurify from 3.0.6 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

Fixed a conditional and config dependent mXSS-style bypass reported by @nsysean

Added a new feature to allow specific hook removal, thanks @davecardwell

Added purify.js and purify.min.js to exports, thanks @Aetherinox

Added better logic in case no window object is president, thanks @yehuya

Updated some dependencies called out by dependabot

Updated license files etc to show the correct year

DOMPurify 3.2.3

Fixed two conditional sanitizer bypasses discovered by @parrot409 and @Slonser

Updated the attribute clobbering checks to prevent future bypasses, thanks @parrot409

DOMPurify 3.2.2

Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @yaniv-git

Fixed several minor issues with the type definitions, thanks again @reduckted

Fixed a minor issue with the types reference for trusted types, thanks @reduckted

Fixed a minor problem with the template detection regex on some systems, thanks @svdb99

DOMPurify 3.2.1

Fixed several minor issues with the type definitions, thanks @reduckted @ghiscoding @asamuzaK @MiniDigger

Fixed an issue with non-minified dist files and order of imports, thanks @reduckted

DOMPurify 3.2.0

Added type declarations, thanks @reduckted , @philmayfield, @aloisklink, @ssi02014 and others

Fixed a minor issue with the handling of hooks, thanks @kevin-mizu

DOMPurify 3.1.7

Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa

Fixed several smaller typos in documentation and test & build files, thanks @christianhg

Added better support for Angular compiler, thanks @jeroen1602

Added several new attributes to HTML and SVG allow-list, thanks @Gigabyte5671 and @Rotzbua

Removed the foreignObject element from the list of HTML entry-points, thanks @masatokinugawa

Bumped several dependencies to be more up to date

DOMPurify 3.1.6

Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu

Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @realansgar

Fixed a minor problem with the bower file pointing to the wrong dist path

Fixed several minor typos in docs, comments and comment blocks, thanks @Rotzbua

Updated several development dependencies

DOMPurify 3.1.5

Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC

Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

DOMPurify 3.1.4

Fixed an issue with the recently implemented isNaN checks, thanks @tulach

Added several new popover attributes to allow-list, thanks @Gigabyte5671

Fixed the tests and adjusted the test runner to cover all branches

... (truncated)

Commits

ec29e65 Merge pull request #1062 from cure53/main
1c1b183 chore: Preparing 3.2.4 release
d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
9ad7933 tests: DOMPurify custom window tests improvements
72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
bc72d44 Fix tests
363a89d fix: handle undefined Element in DOMPurify initialization
f41b45d Update LICENSE
b25bf26 Update README.md
Additional commits viewable in compare view

Updates esbuild from 0.17.14 to 0.25.0

Release notes

Sourced from esbuild's releases.

v0.25.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.24.0 or ~0.24.0. See npm's documentation about semver for more information.
Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)

This change addresses esbuild's first security vulnerability report. Previously esbuild set the Access-Control-Allow-Origin header to * to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.

Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to --serve=. The default host is 0.0.0.0, which refers to all of the IP addresses that represent the local machine (e.g. both 127.0.0.1 and 192.168.0.1). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.

In addition, the serve() API call has been changed to return an array of hosts instead of a single host string. This makes it possible to determine all of the hosts that esbuild's development server will accept.

Thanks to @sapphi-red for reporting this issue.

Delete output files when a build fails in watch mode (#3643)

It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.
Fix correctness issues with the CSS nesting transform (#3620, #3877, #3933, #3997, #4005, #4037, #4038)

This release fixes the following problems:
Naive expansion of CSS nesting can result in an exponential blow-up of generated CSS if each nesting level has multiple selectors. Previously esbuild sometimes collapsed individual nesting levels using :is() to limit expansion. However, this collapsing wasn't correct in some cases, so it has been removed to fix correctness issues.
/* Original code */
.parent {
  > .a,
  > .b1 > .b2 {
    color: red;
  }
}
/* Old output (with --supported:nesting=false) */
.parent > :is(.a, .b1 > .b2) {
color: red;
}
/* New output (with --supported:nesting=false) */
.parent > .a,
.parent > .b1 > .b2 {
color: red;
}
Thanks to @tim-we for working on a fix.
The & CSS nesting selector can be repeated multiple times to increase CSS specificity. Previously esbuild ignored this possibility and incorrectly considered && to have the same specificity as &. With this release, this should now work correctly:
/* Original code (color should be red) */

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11
Fix TypeScript-specific class transform edge case (#3559)

The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:
// Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
Minifier: allow reording a primitive past a side-effect (#3568)

The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

e9174d6 publish 0.25.0 to npm
c27dbeb fix hosts in plugin-tests.js
6794f60 fix hosts in node-unref-tests.js
de85afd Merge commit from fork
da1de1b fix #4065: bitwise operators can return bigints
f4e9d19 switch case liveness: default is always last
7aa47c3 fix #4028: minify live/dead switch cases better
22ecd30 minify: more constant folding for strict equality
4cdf03c fix #4053: reordering of .tsx in node_modules
dc71977 fix #3692: 0 now picks a random ephemeral port
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.20.0

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

📝 update people, add ctcpip to TC by @ctcpip in expressjs/express#5683

remove minor version pinning from ci by @jonchurch in expressjs/express#5722

Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in expressjs/express#5762

Replace Appveyor windows testing with GHA by @jonchurch in expressjs/express#5599

Add OSSF Scorecard badge by @UlisesGascon in expressjs/express#5436

update scorecard link by @bjohansebas in expressjs/express#5814

Nominate @IamLizu to the triage team by @UlisesGascon in expressjs/express#5836

deps: [email protected] by @blakeembrey in expressjs/express#5603

docs: specify new instructions for question and discuss by @IamLizu in expressjs/express#5835

4.x: Upgrade merge-descriptors dependency by @RobinTail in expressjs/express#5781

[email protected] by @blakeembrey in expressjs/express#5902

New Contributors

@marco-ippolito made their first contribution in expressjs/express#5565

@inigomarquinez made their first contribution in expressjs/express#5590

@mertcanaltin made their first contribution in expressjs/express#5627

@ctcpip made their first contribution in expressjs/express#5690

@bjohansebas made their first contribution in expressjs/express#5814

Full Changelog: expressjs/express@4.19.1...4.20.0

... (truncated)

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

deps: [email protected]

Remove link renderization in html while redirecting

deps: [email protected]

Remove link renderization in html while redirecting

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: [email protected]

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: [email protected]

4.18.3 / 2024-02-29

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

deps: [email protected]

Add partitioned option

Commits

21df421 4.20.0
4c9ddc1 feat: upgrade to [email protected]
9ebe5d5 feat: upgrade to [email protected] (#5928)
ec4a01b feat: upgrade to [email protected] (#5926)
54271f6 fix: don't render redirect values in anchor href
125bb74 [email protected] (#5902)
2a980ad [email protected] (#5781)
a3e7e05 docs: specify new instructions for question and discuss
c5addb9 deps: [email protected] (#5603)
e35380a docs: add @IamLizu to the triage team (#5836)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.

Updates happy-dom from 12.10.1 to 15.10.2

Release notes

Sourced from happy-dom's releases.

v15.10.2

👷‍♂️ Patch fixes

Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @capricorn86 in task #1585

There was a case that was missed with the first patch

v15.10.1

👷‍♂️ Patch fixes

Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @capricorn86 in task #1585

v15.10.0

🎨 Features

Adds a new setting called disableSameOriginPolicy that makes it possible to bypass the same-origin policy in fetch requests - By @OlaviSau in task #1553

v15.9.0

🎨 Features

Adds support for "aspect-ratio" to CSSStyleDeclaration - By @yinm in task #1147

v15.8.5

👷‍♂️ Patch fixes

Fixes bug where Node.getRootNode() returned null when it was within a ShadowRoot that previously been disconnected from the Document - By @capricorn86 in task #1581

v15.8.4

👷‍♂️ Patch fixes

Fixes bug where child nodes of HTMLSelectElement and HTMLFormElement had the wrong reference to the parent - By @capricorn86 in task #1578

Commits

d23834c fix: #1585 Fixes a security vulnerability that allowed for server side code...
5ee0b16 fix: #1585 Fixes security vulnerability that allowed for server side code t...
a20dba9 chore: #1542 Adds SECURITY.md file (#1584)
1625d40 feat: #1553 Adds setting disableSameOriginPolicy, to make it possible to by...
a78cd8f feat: #1147 Adds support for aspect-ratio to CSSStyleDeclaration (#1537)
e6f8b13 fix: #1581 Fixes bug where Node.getRootNode() returned null when it was wi...
38ab960 fix: #1578 Fixes bug where child nodes of HTMLSelectElement and HTMLFormEle...
8f74989 fix: #1534 Toggle open attribute on HTMLDetailsElement when dispatching a c...
7f57469 fix: #1546 Use globalThis instead of global to make Happy DOM work in o...
759b4fb fix: #1538 Always return Promise<Blob> from ClipboardItem.getType() (#1539)
Additional commits viewable in compare view

Updates http-proxy-middleware from 2.0.6 to 2.0.9

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.9

What's Changed

fix(fixRequestBody): check readableLength by @chimurai in chimurai/http-proxy-middleware#1097

chore(package): v2.0.9 by @chimurai in chimurai/http-proxy-middleware#1099

Full Changelog: chimurai/http-proxy-middleware@v2.0.8...v2.0.9

v2.0.8

What's Changed

fix(fixRequestBody): prevent multiple .write() calls by @chimurai in chimurai/http-proxy-middleware#1090

fix(fixRequestBody): handle invalid request by @chimurai in chimurai/http-proxy-middleware#1091

chore(package): v2.0.8 by @chimurai in chimurai/http-proxy-middleware#1094

Full Changelog: chimurai/http-proxy-middleware@v2.0.7...v2.0.8

v2.0.7

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7

v2.0.7-beta.1

Full Changelog: chimurai/http-proxy-middleware@v2.0.7-beta.0...v2.0.7-beta.1

v2.0.7-beta.0

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7-beta.0

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.9

fix(fixRequestBody): check readableLength

v2.0.8

fix(fixRequestBody): prevent multiple .write() calls

fix(fixRequestBody): handle invalid request

v2.0.7

ci(github actions): add publish.yml

fix(filter): handle errors

Commits

617a7c9 chore(package): v2.0.9 (#1099)
d22d587 fix(fixRequestBody): check readableLength (#1097)
d03d51b chore(package): v2.0.8 (#1094)
c50dd06 fix(fixRequestBody): handle invalid request (#1091)
76a9d8d fix(fixRequestBody): prevent multiple .write() calls (#1090)
1e92339 ci(github-actions): fix npm tag
90afb7c chore(package): v2.0.7
0b4274e fix(filter): handle errors
1bd6dd5 ci(github actions): add publish.yml
See full diff in compare view

Updates vite from 4.5.2 to 4.5.14

Release notes

Sourced from vite's releases.Description has been truncated

… updates Bumps the npm_and_yarn group with 24 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.8.1` | `7.119.1` | | [semver](https://github.com/npm/node-semver) | `7.6.0` | `7.6.1` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.0.6` | `3.2.4` | | [esbuild](https://github.com/evanw/esbuild) | `0.17.14` | `0.25.0` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.20.0` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `12.10.1` | `15.10.2` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.6` | `2.0.9` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.5.2` | `4.5.14` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.0.0-beta.4` | `1.0.0-beta.5` | | [postcss](https://github.com/postcss/postcss) | `8.4.35` | `8.4.36` | | [mermaid](https://github.com/mermaid-js/mermaid) | `10.9.1` | `10.9.3` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.5.17` | `2.20.6` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.18` | `4.2.19` | | [rollup](https://github.com/rollup/rollup) | `4.18.1` | `4.22.4` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.24.0` | `7.24.7` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.0` | `4.2.0` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [serve-static](https://github.com/expressjs/serve-static) | `1.15.0` | `1.16.2` | | [store2](https://github.com/nbubna/store) | `2.14.3` | `2.14.4` | | [undici](https://github.com/nodejs/undici) | `5.22.1` | `5.29.0` | | [ws](https://github.com/websockets/ws) | `6.2.2` | `6.2.3` | Bumps the npm_and_yarn group with 5 updates in the /client/web-sveltekit directory: | Package | From | To | | --- | --- | --- | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.5.2` | `4.5.14` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.0.0-beta.4` | `1.0.0-beta.5` | | [mermaid](https://github.com/mermaid-js/mermaid) | `10.9.1` | `10.9.3` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.5.17` | `2.20.6` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.18` | `4.2.19` | Updates `@sentry/browser` from 7.8.1 to 7.119.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.8.1...7.119.1) Updates `semver` from 7.6.0 to 7.6.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.0...v7.6.1) Updates `dompurify` from 3.0.6 to 3.2.4 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.6...3.2.4) Updates `esbuild` from 0.17.14 to 0.25.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md) - [Commits](evanw/esbuild@v0.17.14...v0.25.0) Updates `express` from 4.18.2 to 4.20.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.20.0) Updates `happy-dom` from 12.10.1 to 15.10.2 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v12.10.1...v15.10.2) Updates `http-proxy-middleware` from 2.0.6 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.9) Updates `vite` from 4.5.2 to 4.5.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.14/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.14/packages/vite) Updates `vitest` from 1.0.0-beta.4 to 1.0.0-beta.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v1.0.0-beta.5/packages/vitest) Updates `postcss` from 8.4.35 to 8.4.36 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.35...8.4.36) Updates `mermaid` from 10.9.1 to 10.9.3 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md) - [Commits](mermaid-js/mermaid@v10.9.1...v10.9.3) Updates `@sveltejs/kit` from 2.5.17 to 2.20.6 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit) Updates `svelte` from 4.2.18 to 4.2.19 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) Updates `rollup` from 4.18.1 to 4.22.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.18.1...v4.22.4) Updates `@babel/helpers` from 7.24.0 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-helpers) Updates `body-parser` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.1...1.20.3) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `d3-color` from 1.2.3 to 1.4.1 - [Release notes](https://github.com/d3/d3-color/releases) - [Commits](d3/d3-color@v1.2.3...v1.4.1) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `follow-redirects` from 1.15.1 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.1...v1.15.9) Updates `http-cache-semantics` from 4.1.0 to 4.2.0 - [Commits](https://github.com/kornelski/http-cache-semantics/commits) Updates `image-size` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/image-size/image-size/releases) - [Commits](image-size/image-size@v1.1.1...v1.2.1) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `katex` from 0.16.10 to 0.16.22 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.10...v0.16.22) Updates `requirejs` from 2.3.6 to 2.3.7 - [Commits](requirejs/r.js@2.3.6...2.3.7) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `store2` from 2.14.3 to 2.14.4 - [Commits](nbubna/store@2.14.3...2.14.4) Updates `undici` from 5.22.1 to 5.29.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.22.1...v5.29.0) Updates `webpack` from 5.90.3 to 5.99.9 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.90.3...v5.99.9) Updates `ws` from 6.2.2 to 6.2.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.2...6.2.3) Updates `vite` from 4.5.2 to 4.5.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.14/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.14/packages/vite) Updates `vitest` from 1.0.0-beta.4 to 1.0.0-beta.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v1.0.0-beta.5/packages/vitest) Updates `mermaid` from 10.9.1 to 10.9.3 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md) - [Commits](mermaid-js/mermaid@v10.9.1...v10.9.3) Updates `@sveltejs/kit` from 2.5.17 to 2.20.6 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit) Updates `svelte` from 4.2.18 to 4.2.19 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.119.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.6.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 3.2.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.25.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.20.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: happy-dom dependency-version: 15.10.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 4.5.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 1.0.0-beta.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.4.36 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: mermaid dependency-version: 10.9.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@sveltejs/kit" dependency-version: 2.20.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-version: 4.2.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.22.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.24.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 6.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: d3-color dependency-version: 1.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-version: 3.1.10 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.15.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-cache-semantics dependency-version: 4.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: image-size dependency-version: 1.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 1.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: katex dependency-version: 0.16.22 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: requirejs dependency-version: 2.3.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: store2 dependency-version: 2.14.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.99.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 6.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 4.5.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 1.0.0-beta.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: mermaid dependency-version: 10.9.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@sveltejs/kit" dependency-version: 2.20.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-version: 4.2.19 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm_and_yarn group across 2 directories with 32 updates #9

chore(deps): bump the npm_and_yarn group across 2 directories with 32 updates #9

Uh oh!

dependabot bot commented on behalf of github Jun 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser` (incl. Tracing, Replay, Feedback) - Webpack (gzipped)	80.96 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack (gzipped)	71.89 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas) - Webpack (gzipped)	76.14 KB
`@sentry/browser` (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped)	65.52 KB
`@sentry/browser` (incl. Tracing) - Webpack (gzipped)	35.77 KB
`@sentry/browser` (incl. browserTracingIntegration) - Webpack (gzipped)	35.66 KB
`@sentry/browser` (incl. Feedback) - Webpack (gzipped)	31.71 KB
`@sentry/browser` (incl. sendFeedback) - Webpack (gzipped)	31.72 KB
`@sentry/browser` - Webpack (gzipped)	22.91 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback) - ES6 CDN Bundle (gzipped)	79.17 KB
`@sentry/browser` (incl. Tracing, Replay) - ES6 CDN Bundle (gzipped)	70.49 KB
`@sentry/browser` (incl. Tracing) - ES6 CDN Bundle (gzipped)	36.17 KB
`@sentry/browser` - ES6 CDN Bundle (gzipped)	25.41 KB
`@sentry/browser` (incl. Tracing, Replay) - ES6 CDN Bundle (minified & uncompressed)	221.92 KB
`@sentry/browser` (incl. Tracing) - ES6 CDN Bundle (minified & uncompressed)	109.52 KB
`@sentry/browser` - ES6 CDN Bundle (minified & uncompressed)	76.24 KB
`@sentry/browser` (incl. Tracing) - ES5 CDN Bundle (gzipped)	39.45 KB
`@sentry/react` (incl. Tracing, Replay) - Webpack (gzipped)	72.4 KB
`@sentry/react` - Webpack (gzipped)	22.94 KB
`@sentry/nextjs` Client (incl. Tracing, Replay) - Webpack (gzipped)	90.16 KB
`@sentry/nextjs` Client - Webpack (gzipped)	54.27 KB
`@sentry-internal/feedback` - Webpack (gzipped)	17.34 KB

chore(deps): bump the npm_and_yarn group across 2 directories with 32 updates #9

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 2 directories with 32 updates #9

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 12, 2025

7.119.1

7.119.0

Bundle size 📦

7.119.1

7.119.0

7.118.0

7.117.0

7.116.0

7.115.0

7.114.0

Important Changes

Other Changes

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

DOMPurify 3.2.4

DOMPurify 3.2.3

DOMPurify 3.2.2

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

DOMPurify 3.1.6

DOMPurify 3.1.5

DOMPurify 3.1.4

v0.25.0

Changelog: 2023

0.19.11

4.20.0

What's Changed

Important

Other Changes

New Contributors

4.20.0 / 2024-09-10

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v15.10.2

👷‍♂️ Patch fixes

v15.10.1

👷‍♂️ Patch fixes

v15.10.0

🎨 Features

v15.9.0

🎨 Features

v15.8.5

👷‍♂️ Patch fixes

v15.8.4

👷‍♂️ Patch fixes

v2.0.9

What's Changed

v2.0.8

What's Changed

v2.0.7

v2.0.7-beta.1

v2.0.7-beta.0

v2.0.9

v2.0.8

v2.0.7

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants