[dependabot]

Bumps the npm group with 68 updates in the / directory:

Package	From	To
@arborium/arborium	2.18.1	2.18.2
@atlaskit/pragmatic-drag-and-drop	3.0.0	4.0.0
@atlaskit/pragmatic-drag-and-drop-auto-scroll	3.0.1	3.2.1
@atlaskit/pragmatic-drag-and-drop-hitbox	2.1.0	3.0.0
@choochmeque/tauri-plugin-sharekit-api	0.4.0-rc.5	0.4.0-rc.7
@lottiefiles/dotlottie-react	0.19.14	0.19.16
@lottiefiles/dotlottie-web	0.79.1	0.80.0
@matrix-org/matrix-sdk-crypto-wasm	18.4.0	18.9.0
@noble/hashes	2.3.0	2.4.0
@sableclient/tauri-plugin-livekit-mobile	0.2.0	0.4.0
@sentry/react	10.70.0	11.4.0
@tanstack/react-query	5.101.4	5.104.1
@tanstack/react-query-devtools	5.101.4	5.104.1
@tanstack/react-virtual	3.14.9	3.14.13
@tauri-apps/api	2.11.1	2.12.1
@tauri-apps/plugin-clipboard-manager	2.3.2	2.4.1
@tauri-apps/plugin-deep-link	2.4.9	2.6.1
@tauri-apps/plugin-dialog	2.7.2	2.8.1
@tauri-apps/plugin-fs	2.5.1	2.6.0
@tauri-apps/plugin-geolocation	2.3.3	2.4.1
@tauri-apps/plugin-http	2.5.9	2.8.0
@tauri-apps/plugin-opener	2.5.4	2.7.0
@tauri-apps/plugin-os	2.3.2	2.4.0
@tauri-apps/plugin-process	2.3.1	2.4.0
@tauri-apps/plugin-store	2.4.4	2.5.0
@tauri-apps/plugin-updater	2.10.1	2.13.1
dompurify	3.4.13	3.4.16
folds	2.7.1	2.7.2
html-react-parser	6.1.7	6.1.8
i18next	26.3.6	26.4.2
i18next-http-backend	4.0.1	4.0.2
immer	11.1.17	11.1.21
jotai	2.20.2	3.0.1
katex	0.18.4	0.19.0
livekit-client	2.22.0	2.22.3
marked	18.0.9	18.0.14
matrix-js-sdk	42.3.0	43.0.0
matrix-widget-api	1.18.0	1.20.0
pdfjs-dist	6.2.108	6.4.299
prosemirror-history	1.5.0	1.5.1
prosemirror-model	1.25.11	1.25.12
prosemirror-view	1.42.2	1.42.6
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-aria	3.51.0	3.52.1
react-colorful	5.8.0	5.8.1
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.4	19.3.0
react-i18next	17.0.11	17.0.15
react-router	8.3.0	8.4.0
virtua	0.50.1	0.53.1
@playwright/test	1.62.1	1.63.0
@tauri-apps/cli	2.11.4	2.12.1
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.4	14.6.7
@types/node	26.2.0	26.6.4
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.4	19.3.0
@vitejs/plugin-react	6.0.5	6.1.1
@vitest/coverage-v8	4.1.10	5.0.3
@vitest/ui	4.1.10	5.0.3
jsdom	30.0.1	30.1.2
knip	6.32.2	6.39.0
oxfmt	0.63.0	0.71.0
oxlint	1.78.0	1.86.0
oxlint-tsgolint	7.0.2001	7.0.2003
testcontainers	12.1.0	12.2.0
vite	8.2.1	8.3.2
vite-plugin-pwa	1.3.0	2.0.0
vitest	4.1.10	5.0.3

Updates @arborium/arborium from 2.18.1 to 2.18.2

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop from 3.0.0 to 4.0.0

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop-auto-scroll from 3.0.1 to 3.2.1

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop-hitbox from 2.1.0 to 3.0.0

Commits

• See full diff in compare view

Updates @choochmeque/tauri-plugin-sharekit-api from 0.4.0-rc.5 to 0.4.0-rc.7

Release notes

Sourced from @​choochmeque/tauri-plugin-sharekit-api's releases.

v0.4.0-rc.7

Maintenance release — dependency, CI and example-app updates only; no functional changes to the plugin API.

Changes

• Widen the clippy allow on the desktop stubs share_text / share_file to unknown_lints, clippy::unused_async, clippy::unused_async_trait_impl; lint compatibility only, the stubs still return Error::UnsupportedPlatform (5443132)

Build & tooling

• Kotlin Gradle plugin 1.9.25 → 2.1.21 for the Android example (bbbcb20)
• CI: Node 24 in every workflow (2d568b1)
• CI: refresh the apt index before cache-apt-pkgs-action, add libglib2.0-dev to the package list and bump the apt cache key to 1.2 (8806dee, 1d634f7)
• CI: forward ANDROID_NDK_LATEST_HOME into NDK_HOME / ANDROID_NDK_HOME at shell runtime for the Android demo build; pin Xcode 26.5 and drop MetalToolchain for the iOS demo build (62fede7)
• CI: publish.yml apt setup aligned with checks.yml — index refresh, libglib2.0-dev, cache key 1.2 (#245)
• Security advisories resolved in transitive dependencies: picomatch, and serde_with / tauri in the example app (#244)

Dependencies

• eslint 10.4.1 → 10.9.1, typescript-eslint 8.61.0 → 8.68.0, prettier 3.8.4 → 3.9.6, rollup 4.61.1 → 4.63.1, eslint-plugin-security 4.0.0 → 4.0.1
• actions/checkout 6 → 7, actions/setup-node 6 → 7, actions/setup-java 5 → 6
• example app: vite 8.0.16 → 8.2.2, @​sveltejs/kit 2.65.0 → 2.70.3, @​sveltejs/vite-plugin-svelte 7.1.2 → 7.3.0, svelte 5.56.3 → 5.56.10, svelte-check 4.6.0 → 4.7.6, @​tauri-apps/cli 2.11.2 → 2.11.4, @​tauri-apps/api 2.11.0 → 2.11.1, picomatch 4.0.4 → 4.0.7
• example app (Cargo): tauri 2.11.0 → 2.11.1, serde_with 3.16.1 → 3.21.0
• example app (Gradle): androidx.webkit:webkit 1.14.0 → 1.17.0

Full changelog: Choochmeque/tauri-plugin-sharekit@v0.4.0-rc.5...v0.4.0-rc.7

Commits

• c2a9cc3 Bump version to 0.4.0-rc.7
• 92eb711 Merge pull request #246 from Choochmeque/ci/publish-pnpm
• f523645 Pin the npm self-update to major 11
• aa6a33b Bump version to 0.4.0-rc.6
• 6ce6b60 Merge pull request #245 from Choochmeque/fix/publish-apt
• 5f53b95 Align publish.yml apt setup with checks.yml
• 7d2256d Merge pull request #244 from Choochmeque/chore/advisories-20260830
• 13f9c1f Resolve security advisories in example app dependencies (serde_with, tauri)
• a9e81b6 Resolve security advisories in dependencies (picomatch)
• 14c262d Merge pull request #235 from Choochmeque/dependabot/npm_and_yarn/eslint-10.9.1
• Additional commits viewable in compare view

Updates @lottiefiles/dotlottie-react from 0.19.14 to 0.19.16

Release notes

Sourced from @​lottiefiles/dotlottie-react's releases.

@​lottiefiles/dotlottie-react@​0.19.16

Patch Changes

• Updated dependencies [0874fae]
• Updated dependencies [727add3]
  • @​lottiefiles/dotlottie-web@​0.80.0

@​lottiefiles/dotlottie-react@​0.19.15

Patch Changes

• Updated dependencies [14aee74]
  • @​lottiefiles/dotlottie-web@​0.79.2

Changelog

Sourced from @​lottiefiles/dotlottie-react's changelog.

0.19.16

Patch Changes

• Updated dependencies [0874fae]
• Updated dependencies [727add3]
  • @​lottiefiles/dotlottie-web@​0.80.0

0.19.15

Patch Changes

• Updated dependencies [14aee74]
  • @​lottiefiles/dotlottie-web@​0.79.2

Commits

• bb5abcf chore: update versions (#964)
• 7f717f9 chore: update versions (#956)
• See full diff in compare view

Updates @lottiefiles/dotlottie-web from 0.79.1 to 0.80.0

Release notes

Sourced from @​lottiefiles/dotlottie-web's releases.

@​lottiefiles/dotlottie-web@​0.80.0

Minor Changes

• 0874fae: feat: add experimental support for MP4 video assets in dotLottie files

Patch Changes

• 727add3: fix: setWasmUrl() disables the jsdelivr/unpkg fallback instead of still reaching unpkg when the configured URL fails; DotLottieWorker.setWasmUrl() resolves relative URLs against the page (the blob worker can't) and reaches workers that exist but haven't started loading

@​lottiefiles/dotlottie-web@​0.79.2

Patch Changes

• 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.

Changelog

Sourced from @​lottiefiles/dotlottie-web's changelog.

0.80.0

Minor Changes

• 0874fae: feat: add experimental support for MP4 video assets in dotLottie files

Patch Changes

• 727add3: fix: setWasmUrl() disables the jsdelivr/unpkg fallback instead of still reaching unpkg when the configured URL fails; DotLottieWorker.setWasmUrl() resolves relative URLs against the page (the blob worker can't) and reaches workers that exist but haven't started loading

0.79.2

Patch Changes

• 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.

Commits

• bb5abcf chore: update versions (#964)
• 0874fae feat: video assets in dotLottie files (#958)
• 727add3 fix(web): make setWasmUrl opt out of the CDN fallback (#962)
• 7f717f9 chore: update versions (#956)
• 14aee74 chore: update dotlottie-rs wasm bindings to 0f16fb8 (#955)
• See full diff in compare view

Updates @matrix-org/matrix-sdk-crypto-wasm from 18.4.0 to 18.9.0

Release notes

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's releases.

v18.9.0

matrix-sdk-crypto-wasm v18.9.0

• Update matrix-rust-sdk to 0.19.1

  • (No significant changes for matrix-rust-sdk-crypto)

• Update matrix-rust-sdk to 0.19.0

  • (No significant changes for matrix-rust-sdk-crypto)

v18.8.0

matrix-sdk-crypto-wasm v18.8.0

• Update matrix-rust-sdk to 6bcb11f

  • [breaking] Sas::emoji() and Sas::emoji_index() now return None when the emoji method was not part of the negotiated short authentication string methods, instead of returning an emoji representation the remote side never agreed to display. Previously a client that offered only the (mandatory) decimal method would negotiate ["decimal"] in the m.key.verification.accept event, yet a peer built on this crate would still be handed emoji and could show them to its user — leaving the two users comparing a decimal string against emoji, two incomparable projections of the same SAS bytes.

  • A user identity whose master key carries a valid X.509 signature chaining to one of the configured trust anchors now confers trust on that user's devices.

    Previously, such an identity was reported as verified by UserIdentity::is_verified(), but its devices would still be reported as unverified by Device::is_verified(), and the room key sharing strategies withheld room keys from them.

    Requires the experimental-x509-identity-verification feature and a configured X.509 verifier.

  • [breaking] Removed OwnUserIdentityData::is_identity_verified().

    This method asked whether we had verified another user's identity from the perspective of our own identity, and so only ever considered cross-signing.

    Use UserIdentity::is_verified() or OtherUserIdentity::is_verified() instead, which account for every root of trust we have in that identity, including an X.509 signature on its master key.

v18.7.0

matrix-sdk-crypto-wasm v18.7.0

• Add OlmMachine.receiveSyncChangesMsc4186, for processing the encryption state from a simplified sliding sync (MSC4186) response. It behaves like receiveSyncChanges, except that a missing one-time key count means "unchanged" rather than "zero keys on the server". (#345)

• Update matrix-rust-sdk to f333a32.

v18.6.0

matrix-sdk-crypto-wasm v18.6.0

• Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

... (truncated)

Changelog

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's changelog.

matrix-sdk-crypto-wasm v18.9.0

• Update matrix-rust-sdk to 0.19.1

  • (No significant changes for matrix-rust-sdk-crypto)

• Update matrix-rust-sdk to 0.19.0

  • (No significant changes for matrix-rust-sdk-crypto)

matrix-sdk-crypto-wasm v18.8.0

• Update matrix-rust-sdk to 6bcb11f

  • [breaking] Sas::emoji() and Sas::emoji_index() now return None when the emoji method was not part of the negotiated short authentication string methods, instead of returning an emoji representation the remote side never agreed to display. Previously a client that offered only the (mandatory) decimal method would negotiate ["decimal"] in the m.key.verification.accept event, yet a peer built on this crate would still be handed emoji and could show them to its user — leaving the two users comparing a decimal string against emoji, two incomparable projections of the same SAS bytes.

  • A user identity whose master key carries a valid X.509 signature chaining to one of the configured trust anchors now confers trust on that user's devices.

    Previously, such an identity was reported as verified by UserIdentity::is_verified(), but its devices would still be reported as unverified by Device::is_verified(), and the room key sharing strategies withheld room keys from them.

    Requires the experimental-x509-identity-verification feature and a configured X.509 verifier.

  • [breaking] Removed OwnUserIdentityData::is_identity_verified().

    This method asked whether we had verified another user's identity from the perspective of our own identity, and so only ever considered cross-signing.

    Use UserIdentity::is_verified() or OtherUserIdentity::is_verified() instead, which account for every root of trust we have in that identity, including an X.509 signature on its master key.

matrix-sdk-crypto-wasm v18.7.0

• Add OlmMachine.receiveSyncChangesMsc4186, for processing the encryption state from a simplified sliding sync (MSC4186) response. It behaves like receiveSyncChanges, except that a missing one-time key count means "unchanged" rather than "zero keys on the server".

... (truncated)

Commits

• a3d573d v18.9.0
• 861b2fd Changelog for v18.9.0
• 2b7c4f9 Update dependencies with 'cargo update'
• 76a31f0 Bump to matrix-rust-sdk to 0.19.0
• 3c9a071 Merge pull request #347 from matrix-org/release-v18.8.0
• c403153 v18.8.0
• aa0235e chore: Reformat with nightly rustfmt
• 81dfdef chore: Update README for v18.8.0
• e5b1c8b chore: Bump matrix-rust-sdk to 6bcb11f
• 6f728f8 Merge pull request #346 from matrix-org/release-v18.7.0
• Additional commits viewable in compare view

Updates @noble/hashes from 2.3.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

• Protect passed options against mutation / pollution
• keccakprg: fail until entropy is added
• webcrypto: reject output sizes which crashed engine
• blake3: fix tree merging for multi-terabyte streams
• Improve zeroization

Misc

• Speed-up Argon2 by 20%
• Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
• Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
• nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

• Protect passed options against mutation / pollution
• keccakprg: fail until entropy is added
• webcrypto: reject output sizes which crashed engine
• blake3: fix tree merging for multi-terabyte streams
• Improve zeroization

Misc

• Speed-up Argon2 by 20%
• Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
• Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
• nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Commits

• 663c2ae Release 2.4.0.
• a6f7519 Add changelog
• 1bbc433 webcrypto: snapshot opts
• 5bd2e15 Remove unused files
• a3bc7ff Bump vectors
• fcb6cb6 README
• 64f3033 readme
• 9ac6165 Bump ci workflows
• 6587b51 Fix test on bun
• 91ecf91 Fix tests
• Additional commits viewable in compare view

Updates @sableclient/tauri-plugin-livekit-mobile from 0.2.0 to 0.4.0

Release notes

Sourced from @​sableclient/tauri-plugin-livekit-mobile's releases.

v0.4.0

Adds microphone processing and per-participant playout volume to the native call bridge.

Added

• setNativeCallAudioProcessing — echo cancellation, noise suppression and automatic gain control, applied to the live microphone track rather than only the next call.
• setNativeCallParticipantVolume — per-identity playout gain. 0 mutes, 1 is unity, and both platform SDKs clamp at 10.
• connectNativeCall takes an optional audioProcessing block. Omitted means every effect on, which is both SDKs' own default, so an existing guest is unchanged.

Gains are re-applied on TrackSubscribed: a track arrives at unity gain, so a volume set before a participant publishes — or before a reconnect resubscribes them — would otherwise be lost.

NPM

pnpm add @sableclient/tauri-plugin-livekit-mobile@0.4.0

v0.3.0

What's Changed

• feat: expose reportIncomingCall for the system incoming-call screen by @​eleboucher in SableClient/tauri-plugin-livekit-mobile#1

New Contributors

• @​eleboucher made their first contribution in SableClient/tauri-plugin-livekit-mobile#1

Full Changelog: SableClient/tauri-plugin-livekit-mobile@v0.2.0...v0.3.0

NPM

pnpm add @sableclient/tauri-plugin-livekit-mobile@0.3.0

Commits

• 282d2dd fix: import the new request types on the mobile bridge
• 18d8362 fix: unwrap the optional audio processing block on connect
• d72b6c1 feat: expose microphone processing and per-participant volume
• 9d0607b Merge pull request #1 from SableClient/feat/report-incoming-call
• fa24d22 feat: expose reportIncomingCall for the system incoming-call screen
• See full diff in compare view

Updates @sentry/react from 10.70.0 to 11.4.0

Release notes

Sourced from @​sentry/react's releases.

11.4.0

• feat(sveltekit): Support stable SvelteKit 3 (#25009)
• fix(remix): Match the Remix 3.0.0 package versions (#25008)

Bundle size 📦

Path	Size
@​sentry/browser	28.82 KB
@​sentry/browser - with treeshaking flags	27.03 KB
@​sentry/browser - with treeshaking flags tracing without tracing	26.93 KB
@​sentry/browser (incl. Tracing)	50.24 KB
@​sentry/browser (incl. Tracing + Span Streaming)	50.26 KB
@​sentry/browser (incl. Tracing, Profiling)	53.18 KB
@​sentry/browser (incl. Tracing, Replay)	88.91 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	78.15 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	93.5 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	106.16 KB
@​sentry/browser (incl. Feedback)	45.94 KB
@​sentry/browser (incl. sendFeedback)	33.76 KB
@​sentry/browser (incl. FeedbackAsync)	38.75 KB
@​sentry/browser (incl. Metrics)	29.82 KB
@​sentry/browser (incl. Logs)	30.1 KB
@​sentry/browser (incl. Metrics & Logs)	30.74 KB
@​sentry/react	30.63 KB
@​sentry/react (incl. Tracing)	52.54 KB
@​sentry/vue	36.63 KB
@​sentry/vue (incl. Tracing)	53.06 KB
@​sentry/svelte	28.86 KB
@​sentry/remix (Remix 3 client bundle)	54.47 KB
CDN Bundle	30.49 KB
CDN Bundle (incl. Tracing)	50.76 KB
CDN Bundle (incl. Logs, Metrics)	32.68 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	52.65 KB
CDN Bundle (incl. Replay, Logs, Metrics)	72.47 KB
CDN Bundle (incl. Tracing, Replay)	87.46 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	89.39 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	93.48 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	95.42 KB
CDN Bundle - uncompressed	89.98 KB
CDN Bundle (incl. Tracing) - uncompressed	150.87 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	96.4 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	156.69 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	222.93 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	267.8 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	273.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	281.18 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	286.97 KB
@​sentry/nextjs (client)	55 KB
@​sentry/sveltekit (client)	50.65 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

11.4.0

• feat(sveltekit): Support stable SvelteKit 3 (#25009)
• fix(remix): Match the Remix 3.0.0 package versions (#25008)

11.3.0

Important Changes

• Remix 3 support (alpha, may break in minor releases)

  • feat(remix): Add Remix 3 browser SDK with a bundled client entry (#24802)
  • feat(remix): Add source map upload for Remix 3 (#24943)
  • feat(remix): Capture Remix 3 component render errors (#24873)
  • feat(remix): Complete Remix 3 server error handling (#24878)
  • feat(remix): Inject debug IDs through the Remix 3 asset server (#24761)
  • feat(remix): Run the orchestrion transform on Remix 3 browser modules (#24894)

• feat(nextjs): Add cache_origin span links to use cache hit spans (#24821)

  A cache.get span for a "use cache" hit now carries a span link (sentry.link.type: 'cache_origin') to the cache.put span of the request that filled the cache entry, connecting the trace that reads a cached value to the trace that produced it.

• fix(cloudflare): Don't treat DO constructor work as incoming RPC calls (#24829)

  Durable Object constructors now run in their own isolation scope. When work that the constructor starts, for example a blockConcurrencyWhile callback, calls a method of the instance, that call is no longer treated as an incoming RPC call, so an error the instance catches itself is no longer reported as unhandled. As a result, Sentry.setTag(), setUser() and setContext() in a constructor now apply only to that constructor work. They no longer reach later fetch, RPC or alarm invocations, because the scope they used to write to is shared by every Durable Object and handler in the isolate. Use initialScope for static data, and set per-instance data in each handler.

• fix(effect)!: Change peerDependency to v4 and fix currentSpan (#24940)

  @sentry/effect now requires a stable Effect v4 release. Effect v4 beta and release candidate versions are no longer supported. @sentry/effect is in alpha, so this ships in a minor release.

Other Changes

• feat(astro): Register astro route provider (#23792)
• feat(cloudflare): Trace TypeSafe Jev calls in Workers AI as evaluate spans (#24833)
• feat(core): Add route provider API for parameterized route resolution (#23551)
• feat(deps): bump devalue from 5.9.2 to 5.9.4 (#24964)
• feat(effect): Add opt-in for external span parents and isolate root spans (#23900)
• feat(nextjs): Register nextjs route provider (#23552)
• feat(nuxt): Register nuxt route provider (#23794)
• feat(remix): Register remix route provider (#23791)
• feat(vue): Register Vue route provider (#23793)
• fix(bundler-plugins): Keep debug IDs on Vite source maps after the preload rewrite (#24920)
• fix(bundler-plugins): Stabilize debug IDs for Rolldown and Vite 8 builds (#24919)
• fix(cloudflare): Skip binding instrumentation work when spans are not sent (#24655)
• fix(core, node, bun, deno): Align server span client address with event IP (#24767)
• fix(hono): Return the existing client on repeated init in Bun and Deno (#24520)
• fix(nitro): Capture errors only through the Nitro error hook (#24952)
• fix(profiling-node): Send profile chunks with client.sendEnvelope (#24896)
• fix(react-router): Avoid duplicating Vite config arrays (#24930)
• fix(react-router): Resolve the Cloudflare entry in Workers and skip trace meta tags in prerendered pages (#24866)

... (truncated)

Commits

• 7f13c61 release: 11.4.0
• fb73adb Merge pull request #25010 from getsentry/prepare-release/11.4.0
• de3fb96 meta(changelog): Update changelog for 11.4.0
• 4f0fd84 feat(sveltekit): Support stable SvelteKit 3 (#25009)
• ba4db28 fix(remix): Match the Remix 3.0.0 package versions (#25008)
• c8738fb Merge pull request #24991 from getsentry/master
• 5f88a0b Merge commit '1e82c8f33488bc54364d343a7c5ab33ed9056f39'
• 1e82c8f release: 11.3.0
• 481c43c Merge pull request #24987 from getsentry/prepare-release/11.3.0
• 1c7308d meta(changelog): Update changelog for 11.3.0
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.4 to 5.104.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

• #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
• Updated dependencies []:
  • @​tanstack/query-core@​5.103.3

5.103.2

Patch Changes

• Updated dependencies [8a28904]:
  • @​tanstack/query-core@​5.103.2

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0

5.102.8

Patch Changes

... (truncated)

Commits

• 29859ae ci: Version Packages (#11806)
• 339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
• 0a57279 test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...
• c51bb62 chore(*): declare '@​eslint-react/eslint-plugin' in the react packages and exa...
• a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
• d99c84b chore(*): update '@​eslint-react/eslint-plugin' to v5 and apply its 'recommend...
• fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
• e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
• 2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
• c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
• Additional commits viewable in compare view

Updates @tanstack/react-query-devtools from 5.101.4 to 5.104.1

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-devtools@​5.103.3

Patch Changes

• Updated dependencies [1c9693e, d86ac36]:
  • @​tanstack/react-query@​5.103.3
  • @​tanstack/query-devtools@​5.103.3

Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

5.103.3

Patch Changes

• Updated dependencies [1c9693e, d86ac36]:
  • @​tanstack/react-query@​5.103.3
  • @​tanstack/query-devtools@​5.103.3

5.103.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.2
  • @​tanstack/react-query@​5.103.2

5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.1
  • @​tanstack/react-query@​5.103.1

5.103.0

Patch Changes

• #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

... (truncated)

Commits

• 29859ae ci: Version Packages (#11806)
• 339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
• c51bb62 chore(*): declare '@​eslint-react/eslint-plugin' in the react packages and exa...
• a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
• d99c84b chore(*): update '@​eslint-react/eslint-plugin' to v5 and apply its 'recommend...
• fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
• e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
• 2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.