Bump the npm-dependencies group with 5 updates by dependabot[bot] · Pull Request #518 · webstackdev/astro.webstackbuilders.com

dependabot · 2025-12-22T03:15:59Z

Bumps the npm-dependencies group with 5 updates:

Package	From	To
@sentry/astro	`10.32.0`	`10.32.1`
@sentry/browser	`10.32.0`	`10.32.1`
focus-trap	`7.6.6`	`7.7.0`
libphonenumber-js	`1.12.31`	`1.12.33`
@rollup/rollup-linux-x64-gnu	`4.53.5`	`4.54.0`

Updates @sentry/astro from 10.32.0 to 10.32.1

Release notes

Sourced from @sentry/astro's releases.

10.32.1

fix(cloudflare): Add hono transaction name when error is thrown (#18529)

fix(ember): Make implementation field optional (hash routes) (#18564)

fix(vercelai): Fix input token count (#18574)

chore(lint): prefer 'unknown' to 'any', fix lint warnings

chore(test): Remove cloudflare-astro e2e test (#18567)

Bundle size 📦

Path Size

@sentry/browser 24.24 KB

@sentry/browser - with treeshaking flags 22.77 KB

@sentry/browser (incl. Tracing) 40.62 KB

@sentry/browser (incl. Tracing, Profiling) 45.12 KB

@sentry/browser (incl. Tracing, Replay) 78.3 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.28 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 82.88 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 94.83 KB

@sentry/browser (incl. Feedback) 40.57 KB

@sentry/browser (incl. sendFeedback) 28.82 KB

@sentry/browser (incl. FeedbackAsync) 33.7 KB

@sentry/react 25.92 KB

@sentry/react (incl. Tracing) 42.77 KB

@sentry/vue 28.6 KB

@sentry/vue (incl. Tracing) 42.39 KB

@sentry/svelte 24.25 KB

CDN Bundle 26.62 KB

CDN Bundle (incl. Tracing) 41.25 KB

CDN Bundle (incl. Tracing, Replay) 77.1 KB

CDN Bundle (incl. Tracing, Replay, Feedback) 82.44 KB

CDN Bundle - uncompressed 78.18 KB

CDN Bundle (incl. Tracing) - uncompressed 122.47 KB

CDN Bundle (incl. Tracing, Replay) - uncompressed 236.27 KB

CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 248.74 KB

@sentry/nextjs (client) 44.94 KB

@sentry/sveltekit (client) 40.98 KB

@sentry/node-core 50.4 KB

@sentry/node 157.73 KB

@sentry/node - without tracing 90.87 KB

@sentry/aws-serverless 106.02 KB

Changelog

Sourced from @sentry/astro's changelog.

10.32.1

fix(cloudflare): Add hono transaction name when error is thrown (#18529)

fix(ember): Make implementation field optional (hash routes) (#18564)

fix(vercelai): Fix input token count (#18574)

chore(lint): prefer 'unknown' to 'any', fix lint warnings

chore(test): Remove cloudflare-astro e2e test (#18567)

Commits

528ade2 release: 10.32.1
25f695d Merge pull request #18578 from getsentry/prepare-release/10.32.1
a981a3d meta(changelog): Update changelog for 10.32.1
0d8547c fix(vercelai): Fix input token count (#18574)
71384a2 chore(lint): prefer 'unknown' to 'any', fix lint warnings
d1dd308 chore(test): Remove cloudflare-astro e2e test (#18567)
12f3007 fix(ember): Make implementation field optional (hash routes) (#18564)
3fda84d fix(cloudflare): Add hono transaction name when error is thrown (#18529)
a538901 Merge pull request #18563 from getsentry/master
063c4dc Merge pull request #18562 from getsentry/ab/skip-ci-when-no-code-changes
Additional commits viewable in compare view

Updates @sentry/browser from 10.32.0 to 10.32.1

Release notes

Sourced from @sentry/browser's releases.

10.32.1

fix(cloudflare): Add hono transaction name when error is thrown (#18529)

fix(ember): Make implementation field optional (hash routes) (#18564)

fix(vercelai): Fix input token count (#18574)

chore(lint): prefer 'unknown' to 'any', fix lint warnings

chore(test): Remove cloudflare-astro e2e test (#18567)

Bundle size 📦

Path Size

@sentry/browser 24.24 KB

@sentry/browser - with treeshaking flags 22.77 KB

@sentry/browser (incl. Tracing) 40.62 KB

@sentry/browser (incl. Tracing, Profiling) 45.12 KB

@sentry/browser (incl. Tracing, Replay) 78.3 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 68.28 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 82.88 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 94.83 KB

@sentry/browser (incl. Feedback) 40.57 KB

@sentry/browser (incl. sendFeedback) 28.82 KB

@sentry/browser (incl. FeedbackAsync) 33.7 KB

@sentry/react 25.92 KB

@sentry/react (incl. Tracing) 42.77 KB

@sentry/vue 28.6 KB

@sentry/vue (incl. Tracing) 42.39 KB

@sentry/svelte 24.25 KB

CDN Bundle 26.62 KB

CDN Bundle (incl. Tracing) 41.25 KB

CDN Bundle (incl. Tracing, Replay) 77.1 KB

CDN Bundle (incl. Tracing, Replay, Feedback) 82.44 KB

CDN Bundle - uncompressed 78.18 KB

CDN Bundle (incl. Tracing) - uncompressed 122.47 KB

CDN Bundle (incl. Tracing, Replay) - uncompressed 236.27 KB

CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 248.74 KB

@sentry/nextjs (client) 44.94 KB

@sentry/sveltekit (client) 40.98 KB

@sentry/node-core 50.4 KB

@sentry/node 157.73 KB

@sentry/node - without tracing 90.87 KB

@sentry/aws-serverless 106.02 KB

Changelog

Sourced from @sentry/browser's changelog.

10.32.1

fix(cloudflare): Add hono transaction name when error is thrown (#18529)

fix(ember): Make implementation field optional (hash routes) (#18564)

fix(vercelai): Fix input token count (#18574)

chore(lint): prefer 'unknown' to 'any', fix lint warnings

chore(test): Remove cloudflare-astro e2e test (#18567)

Commits

528ade2 release: 10.32.1
25f695d Merge pull request #18578 from getsentry/prepare-release/10.32.1
a981a3d meta(changelog): Update changelog for 10.32.1
0d8547c fix(vercelai): Fix input token count (#18574)
71384a2 chore(lint): prefer 'unknown' to 'any', fix lint warnings
d1dd308 chore(test): Remove cloudflare-astro e2e test (#18567)
12f3007 fix(ember): Make implementation field optional (hash routes) (#18564)
3fda84d fix(cloudflare): Add hono transaction name when error is thrown (#18529)
a538901 Merge pull request #18563 from getsentry/master
063c4dc Merge pull request #18562 from getsentry/ab/skip-ci-when-no-code-changes
Additional commits viewable in compare view

Updates focus-trap from 7.6.6 to 7.7.0

Release notes

Sourced from focus-trap's releases.

v7.7.0

Minor Changes

14b9155: Adds a new feature "isolateSubtrees", allowing focus-trap to prevent screen readers from reading content outside the trap. (#1575)

Changelog

Sourced from focus-trap's changelog.

7.7.0

Minor Changes

14b9155: Adds a new feature "isolateSubtrees", allowing focus-trap to prevent screen readers from reading content outside the trap. (#1575)

Commits

ece30cb Version Packages (#1708)
f1d2567 Change GH_TOKEN to GITHUB_TOKEN in release workflow
4527962 Update GitHub Actions permissions and token usage
3d663f8 Use new GH_TOKEN fine-grained PAT
631f793 add andy-blum as a contributor for code (#1707)
14b9155 Add config option to isolate trap subtrees (#1691)
e7987a0 [DEPENDABOT]: Bump @typescript-eslint/eslint-plugin from 8.49.0 to 8.50.0 (#1...
39191fd [DEPENDABOT]: Bump @types/node from 24.10.2 to 25.0.3 (#1698)
5579f75 [DEPENDABOT]: Bump cypress from 15.7.1 to 15.8.0 (#1699)
9e6f385 [DEPENDABOT]: Bump eslint-plugin-jest from 29.2.1 to 29.5.0 (#1701)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for focus-trap since your current version.

Updates libphonenumber-js from 1.12.31 to 1.12.33

Changelog

Sourced from libphonenumber-js's changelog.

1.12.33 / 18.12.2025

Updated metadata to version 9.0.21:

Updated alternate formatting data for country calling code(s): 91

Updated phone metadata for region code(s): CL, EE, ET, GE, GY, HK, IN, KR, MG, SG, SV, US

New geocoding data for country calling code(s): 1353 (en)

Updated geocoding data for country calling code(s): 251 (en)

Updated carrier data for country calling code(s): 34 (en), 36 (en), 43 (en), 48 (en), 56 (en), 65 (en), 261 (en), 501 (en), 503 (en), 852 (en, zh)

Updated / refreshed time zone meta data.

1.12.32 / 5.12.2025

Updated metadata to version 9.0.20:

Updated phone metadata for region code(s): GY, IL, MU, TD, TZ, UG, UZ

New geocoding data for country calling code(s): 229 (en)

Updated carrier data for country calling code(s): 34 (en), 230 (en), 255 (en), 256 (en), 998 (en)

Commits

5f43506 1.12.33
b2135b3 Updated metadata
3c252ca 1.12.32
a3b1423 Updated metadata
df6a274 Update CHANGELOG.md
See full diff in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.53.5 to 4.54.0

Release notes

Sourced from @rollup/rollup-linux-x64-gnu's releases.

v4.54.0

4.54.0

2025-12-20

Features

Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)

Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

#6046: fix: correctly handle wellknown protocols (@cyyynthia, @lukastaegert)

#6201: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6211: chore(deps): update msys2/setup-msys2 digest to 4f806de (@renovate[bot], @lukastaegert)

#6212: chore(deps): update actions/cache action to v5 (@renovate[bot])

#6213: chore(deps): update github artifact actions (major) (@renovate[bot])

#6214: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6215: chore(deps): lock file maintenance (@renovate[bot])

#6216: fix: include namespace variable paths during try-catch deoptimization (@schwing)

Changelog

Sourced from @rollup/rollup-linux-x64-gnu's changelog.

4.54.0

2025-12-20

Features

Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)

Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

#6046: fix: correctly handle wellknown protocols (@cyyynthia, @lukastaegert)

#6201: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6211: chore(deps): update msys2/setup-msys2 digest to 4f806de (@renovate[bot], @lukastaegert)

#6212: chore(deps): update actions/cache action to v5 (@renovate[bot])

#6213: chore(deps): update github artifact actions (major) (@renovate[bot])

#6214: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6215: chore(deps): lock file maintenance (@renovate[bot])

#6216: fix: include namespace variable paths during try-catch deoptimization (@schwing)

Commits

88f1430 4.54.0
e5e01c1 fix: include namespace variable paths during try-catch deoptimization (#6216)
107959c fix: correctly handle wellknown protocols (#6046)
160514d chore(deps): lock file maintenance (#6215)
59bda58 chore(deps): update msys2/setup-msys2 digest to 4f806de (#6211)
9b7ca4d chore(deps): update actions/cache action to v5 (#6212)
abf1fb5 chore(deps): update github artifact actions (major) (#6213)
0dec3ca fix(deps): lock file maintenance minor/patch updates (#6214)
c3fa50c chore(deps): update dependency lru-cache to v11 (#6201)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@sentry/astro](https://github.com/getsentry/sentry-javascript) | `10.32.0` | `10.32.1` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.32.0` | `10.32.1` | | [focus-trap](https://github.com/focus-trap/focus-trap) | `7.6.6` | `7.7.0` | | [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) | `1.12.31` | `1.12.33` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.53.5` | `4.54.0` | Updates `@sentry/astro` from 10.32.0 to 10.32.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.32.0...10.32.1) Updates `@sentry/browser` from 10.32.0 to 10.32.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.32.0...10.32.1) Updates `focus-trap` from 7.6.6 to 7.7.0 - [Release notes](https://github.com/focus-trap/focus-trap/releases) - [Changelog](https://github.com/focus-trap/focus-trap/blob/master/CHANGELOG.md) - [Commits](focus-trap/focus-trap@v7.6.6...v7.7.0) Updates `libphonenumber-js` from 1.12.31 to 1.12.33 - [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.12.31...v1.12.33) Updates `@rollup/rollup-linux-x64-gnu` from 4.53.5 to 4.54.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.53.5...v4.54.0) --- updated-dependencies: - dependency-name: "@sentry/astro" dependency-version: 10.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@sentry/browser" dependency-version: 10.32.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: focus-trap dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: libphonenumber-js dependency-version: 1.12.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-12-22T03:15:59Z

Labels

The following labels could not be found: automerge 🤞, type: dependencies 🔗. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2025-12-22T03:16:12Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.
⚠️ 1 packages with OpenSSF Scorecard issues.

See the Details below.

License Issues

package-lock.json

Package	Version	License	Issue Type
@rollup/rollup-linux-x64-gnu	4.54.0	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@rollup/rollup-linux-x64-gnu

4.54.0

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 4	Found 8/17 approved changesets -- score normalized to 4
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 1	branch protection is not maximal on development and all release branches
Packaging	🟢 10	packaging workflow detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts	🟢 10	no binaries found in the repo
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/@sentry-internal/browser-utils

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry-internal/feedback

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry-internal/replay

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry-internal/replay-canvas

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/astro

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/browser

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/core

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/node

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/node-core

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/@sentry/opentelemetry

10.32.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	92 existing vulnerabilities detected
SAST	🟢 7	SAST tool detected but not run on all commits

npm/focus-trap

7.7.0

🟢 5.6

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/4 approved changesets -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Maintained	🟢 10	30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 9	1 existing vulnerabilities detected

npm/import-in-the-middle

2.0.1

Unknown

npm/libphonenumber-js

1.12.33

⚠️ 2.7

Details

Check	Score	Reason
Maintained	🟢 10	17 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ -1	No tokens found
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow	⚠️ -1	no workflows found
SAST	⚠️ 0	no SAST tool detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ -1	no dependencies found
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Vulnerabilities	⚠️ 0	28 existing vulnerabilities detected

Scanned Files

package-lock.json

github-actions · 2025-12-22T03:20:28Z

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	72.03%	5706 / 7921
🔵	Statements	70.43%	5990 / 8504
🔵	Functions	71.34%	1108 / 1553
🔵	Branches	59.73%	3074 / 5146

File Coverage

No changed files found.

Generated in workflow #101 for commit 5513195 by the Vitest Coverage Report Action

dependabot · 2025-12-22T22:02:04Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot had a problem deploying to preview December 22, 2025 03:16 Failure

dependabot Bot temporarily deployed to testing December 22, 2025 03:16 Inactive

dependabot Bot closed this Dec 22, 2025

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-0f044d3118 branch December 22, 2025 22:02

Navigation Menu

Bump the npm-dependencies group with 5 updates - #518

Bump the npm-dependencies group with 5 updates#518
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-0f044d3118

dependabot Bot commented on behalf of github Dec 22, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Uh oh!

github-actions Bot commented Dec 22, 2025

Uh oh!

github-actions Bot commented Dec 22, 2025

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	24.24 KB
`@sentry/browser` - with treeshaking flags	22.77 KB
`@sentry/browser` (incl. Tracing)	40.62 KB
`@sentry/browser` (incl. Tracing, Profiling)	45.12 KB
`@sentry/browser` (incl. Tracing, Replay)	78.3 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	68.28 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	82.88 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	94.83 KB
`@sentry/browser` (incl. Feedback)	40.57 KB
`@sentry/browser` (incl. sendFeedback)	28.82 KB
`@sentry/browser` (incl. FeedbackAsync)	33.7 KB
`@sentry/react`	25.92 KB
`@sentry/react` (incl. Tracing)	42.77 KB
`@sentry/vue`	28.6 KB
`@sentry/vue` (incl. Tracing)	42.39 KB
`@sentry/svelte`	24.25 KB
CDN Bundle	26.62 KB
CDN Bundle (incl. Tracing)	41.25 KB
CDN Bundle (incl. Tracing, Replay)	77.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	82.44 KB
CDN Bundle - uncompressed	78.18 KB
CDN Bundle (incl. Tracing) - uncompressed	122.47 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	236.27 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	248.74 KB
`@sentry/nextjs` (client)	44.94 KB
`@sentry/sveltekit` (client)	40.98 KB
`@sentry/node-core`	50.4 KB
`@sentry/node`	157.73 KB
`@sentry/node` - without tracing	90.87 KB
`@sentry/aws-serverless`	106.02 KB

Conversation

dependabot Bot commented on behalf of github Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.32.1

Bundle size 📦

10.32.1

10.32.1

Bundle size 📦

10.32.1

v7.7.0

Minor Changes

7.7.0

Minor Changes

1.12.33 / 18.12.2025

1.12.32 / 5.12.2025

v4.54.0

4.54.0

Features

Bug Fixes

Pull Requests

4.54.0

Features

Bug Fixes

Pull Requests

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Labels

Uh oh!

github-actions Bot commented Dec 22, 2025

Dependency Review

License Issues

package-lock.json

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented Dec 22, 2025

Coverage Report

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Dec 22, 2025 •

edited

Loading