build(deps): Bump the service group in /service with 5 updates by dependabot[bot] · Pull Request #79 · DeepSpaceCartel/devcontainer-builder

dependabot · 2026-10-21T17:45:28Z

Bumps the service group in /service with 5 updates:

Package	From	To
@fastify/type-provider-typebox	`6.2.0`	`6.3.0`
@opentelemetry/auto-instrumentations-node	`0.81.0`	`0.81.2`
@sentry/node	`11.6.0`	`11.8.0`
fastify	`5.12.5`	`5.12.7`
@redocly/cli	`2.62.1`	`2.64.1`

Updates @fastify/type-provider-typebox from 6.2.0 to 6.3.0

Release notes

Sourced from @fastify/type-provider-typebox's releases.

v6.3.0

What's Changed

fix: registerAjvFormats() never registered any format by @Puppo in fastify/fastify-type-provider-typebox#295

Full Changelog: fastify/fastify-type-provider-typebox@v6.2.0...v6.3.0

Commits

1226274 Bumped v6.3.0
374aeb2 fix: registerAjvFormats() never registered any format (#295)
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.81.0 to 0.81.2

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.81.2

0.81.2 (2026-10-16)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-winston bumped from ^0.68.0 to ^0.68.1

auto-instrumentations-node: v0.81.1

0.81.1 (2026-10-15)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-express bumped from ^0.71.0 to ^0.71.1

@opentelemetry/instrumentation-mysql bumped from ^0.69.0 to ^0.69.1

@opentelemetry/instrumentation-nestjs-core bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-pg bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.36.0 to ^0.36.1

@opentelemetry/instrumentation-winston bumped from ^0.67.0 to ^0.68.0

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.81.2 (2026-10-16)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-winston bumped from ^0.68.0 to ^0.68.1

0.81.1 (2026-10-15)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-express bumped from ^0.71.0 to ^0.71.1

@opentelemetry/instrumentation-mysql bumped from ^0.69.0 to ^0.69.1

@opentelemetry/instrumentation-nestjs-core bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-pg bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.36.0 to ^0.36.1

@opentelemetry/instrumentation-winston bumped from ^0.67.0 to ^0.68.0

Commits

862c270 chore: release main (#3837)
3c48599 chore: release main (#3805)
See full diff in compare view

Updates @sentry/node from 11.6.0 to 11.8.0

Release notes

Sourced from @sentry/node's releases.

11.8.0

Important Changes

feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

Node.js 20.19.0 or higher is required.

@sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.

The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.

Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

feat(core): Support SuppressedError in LinkedErrors integration (#25246)

fix(astro): Delete generated source maps for static output (#25310)

fix(astro): Upload source maps of Astro 7's prerender build (#25309)

fix(browser): Apply urlQueryParams to the Referer header (#25324)

fix(cloudflare): auto-instrument when wrangler main is a package (#25343)

fix(hono): Expose runtime-specific SDK options (#25290)

fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)

fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)

fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)

fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)

fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)

fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)

fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

chore: Add external contributor to CHANGELOG.md (#25375)

ci: Install the pnpm version that Volta pins (#25287)

license: Add cli FSL notice to package licenses (#25314)

ref(core): use shared MCP attribute conventions (#25059)

ref(tanstackstart-react): Reuse shared component annotation options (#25313)

test(browser): Keep whitespace text out of the handlers-lcp page (#25280)

test(bun): Restore @sentry/core spies after the Bun.serve tests (#25276)

test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)

test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)

test(e2e): Add node-openai-send-to-sentry test app (#24824)

test(e2e): Add nuxt-5-sourcemaps test (#25268)

test(e2e): Inherit root Volta config in all e2e test apps (#25369)

test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)

test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#25279)

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

11.8.0

Important Changes

feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

Node.js 20.19.0 or higher is required.

@sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.

The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.

Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

feat(core): Support SuppressedError in LinkedErrors integration (#25246)

fix(astro): Delete generated source maps for static output (#25310)

fix(astro): Upload source maps of Astro 7's prerender build (#25309)

fix(browser): Apply urlQueryParams to the Referer header (#25324)

fix(cloudflare): auto-instrument when wrangler main is a package (#25343)

fix(hono): Expose runtime-specific SDK options (#25290)

fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)

fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)

fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)

fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)

fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)

fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)

fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

chore: Add external contributor to CHANGELOG.md (#25375)

ci: Install the pnpm version that Volta pins (#25287)

license: Add cli FSL notice to package licenses (#25314)

ref(core): use shared MCP attribute conventions (#25059)

ref(tanstackstart-react): Reuse shared component annotation options (#25313)

test(browser): Keep whitespace text out of the handlers-lcp page (#25280)

test(bun): Restore @sentry/core spies after the Bun.serve tests (#25276)

test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)

test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)

test(e2e): Add node-openai-send-to-sentry test app (#24824)

test(e2e): Add nuxt-5-sourcemaps test (#25268)

test(e2e): Inherit root Volta config in all e2e test apps (#25369)

test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)

test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

... (truncated)

Commits

c6492ef release: 11.8.0
e091f7f meta(changelog): Update changelog for 11.8.0 (#25388)
30ec754 meta(changelog): Update changelog for 11.8.0
a309cf8 test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
71f1ef9 test(e2e): Inherit root Volta config in all e2e test apps (#25369)
e54e577 chore: Add external contributor to CHANGELOG.md (#25375)
0ed4606 fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
9516aeb fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
7471347 feat(core): Support SuppressedError in LinkedErrors integration (#25246)
f4ae6c5 fix(browser): Apply urlQueryParams to the Referer header (#25324)
Additional commits viewable in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

Fix for GHSA-389g-gv7q-r4x8

What's Changed

[Backport 5.x] types: restrict route lookup methods by @github-actions[bot] in fastify/fastify#7048

[Backport 5.x] perf: decode string bodies once instead of per chunk by @github-actions[bot] in fastify/fastify#7053

[Backport 5.x] perf: avoid resetting the level of request child loggers by @github-actions[bot] in fastify/fastify#7058

[Backport 5.x] fix: resolve reply.mediaType from raw response headers by @github-actions[bot] in fastify/fastify#7067

[Backport 5.x] perf: use a FIFO cache for parsed content-types by @github-actions[bot] in fastify/fastify#7072

[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @mcollina in fastify/fastify#7104

[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @github-actions[bot] in fastify/fastify#7087

[Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @github-actions[bot] in fastify/fastify#7060

[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @github-actions[bot] in fastify/fastify#7094

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits

9f40003 Bumped v5.12.7
16469b9 Bumped v5.12.6
63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
Additional commits viewable in compare view

Updates @redocly/cli from 2.62.1 to 2.64.1

Release notes

Sourced from @redocly/cli's releases.

@redocly/cli@2.64.1

Patch Changes

Fixed an issue where the respect command altered string values in runtime expressions that contained a dot followed by a digit. For example, a token read through $response.body#/token or a quoted value in success criteria.

Fixed an issue where lint and bundle crashed with Unknown type name found: string on OpenAPI 3.2 descriptions that had a deviceAuthorization OAuth flow with non-empty scopes.

Updated @redocly/openapi-core to v2.64.1.

Updated @redocly/respect-core to v2.64.1.

@redocly/cli@2.64.0

Minor Changes

Added the onSettled middleware hook to the generated TypeScript client. Added the client.telemetry option to the generate-client command.

Patch Changes

Updated @redocly/client-generator to v0.7.0.

Updated @redocly/openapi-core to v2.64.0.

Updated @redocly/reunite-integration to v2.64.0.

@redocly/cli@2.63.0

Minor Changes

Added the body-link pagination style to the generate-client command. Generated clients use it to follow the next page URL from a field in the response, set with the nextLink option.

The tanstack-query generator also creates infinite query options for these operations.

Patch Changes

Fixed request timeouts in the generated TypeScript client for older browsers that don't support AbortSignal.timeout() or AbortSignal.any(). Timed-out requests correctly throw TimeoutError instead of AbortError in Chrome 103–123.

Fixed an issue where the generated Go client sent duplicate query parameters when it followed a next page link.

Updated @redocly/client-generator to v0.6.0.

@redocly/cli@2.62.2

Patch Changes

Fixed an issue where the login and push did not exit after a request through a proxy timed out.

Fixed an issue where the login, push, and other Reunite commands failed on Node.js 26. Updated undici to the 7.30.0 version.

Updated handlebars to 4.7.10 to resolve CVE-2026-106444, CVE-2026-106445, and CVE-2026-106446.

Fixed an issue where the respect command ignored the --mtls certificates when a request went through a proxy.

Updated @redocly/reunite-integration to v2.62.2.

Commits

c7cdd4a chore: 🔖 release new versions (#3257)
0fb4d97 chore: make each client generator example tsconfig self-contained (#3259)
309834a chore: move client generator examples to packages/client-generator/examples (...
3cf1c10 fix(respect): keep string values intact when evaluating respect runtime expre...
a8b940b fix(core): accept non-empty scopes in OpenAPI 3.2 deviceAuthorization flow (#...
7f05baf chore: 🔖 release new versions (#3251)
b633d7b fix: failin release pipeline (#3253)
e6af2b0 chore: update redocly/config to v0.66.0 (#3252)
4e6f421 feat: add opt-in usage telemetry to generated TypeScript clients (#3247)
b6415bf chore: update changelog for v1 (#3248)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the service group in /service with 5 updates: | Package | From | To | | --- | --- | --- | | [@fastify/type-provider-typebox](https://github.com/fastify/fastify-type-provider-typebox) | `6.2.0` | `6.3.0` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.81.0` | `0.81.2` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `11.6.0` | `11.8.0` | | [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` | | [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.62.1` | `2.64.1` | Updates `@fastify/type-provider-typebox` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/fastify/fastify-type-provider-typebox/releases) - [Commits](fastify/fastify-type-provider-typebox@v6.2.0...v6.3.0) Updates `@opentelemetry/auto-instrumentations-node` from 0.81.0 to 0.81.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.81.2/packages/auto-instrumentations-node) Updates `@sentry/node` from 11.6.0 to 11.8.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@11.6.0...11.8.0) Updates `fastify` from 5.12.5 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.5...v5.12.7) Updates `@redocly/cli` from 2.62.1 to 2.64.1 - [Release notes](https://github.com/Redocly/redocly-cli/releases) - [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.62.1...@redocly/cli@2.64.1) --- updated-dependencies: - dependency-name: "@fastify/type-provider-typebox" dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: service - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.81.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: service - dependency-name: "@sentry/node" dependency-version: 11.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: service - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: service - dependency-name: "@redocly/cli" dependency-version: 2.64.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: service ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-21T17:45:37Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 7a2b756d-3a58-45d7-a52d-4b514bc891f7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

Navigation Menu

Repository navigation

build(deps): Bump the service group in /service with 5 updates - #79

build(deps): Bump the service group in /service with 5 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/service/service-39076f2c73

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

coderabbitai Bot commented Oct 21, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026

v6.3.0

What's Changed

auto-instrumentations-node: v0.81.2

0.81.2 (2026-10-16)

Dependencies

auto-instrumentations-node: v0.81.1

0.81.1 (2026-10-15)

Dependencies

0.81.2 (2026-10-16)

Dependencies

0.81.1 (2026-10-15)

Dependencies

11.8.0

Important Changes

Other Changes

11.8.0

Important Changes

Other Changes

v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

@​redocly/cli@​2.64.1

Patch Changes

@​redocly/cli@​2.64.0

Minor Changes

Patch Changes

@​redocly/cli@​2.63.0

Minor Changes

Patch Changes

@​redocly/cli@​2.62.2

Patch Changes

Uh oh!

coderabbitai Bot commented Oct 21, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@redocly/cli@2`.64.1

`@redocly/cli@2`.64.0

`@redocly/cli@2`.63.0

`@redocly/cli@2`.62.2