build(deps): bump the minor-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #264 · GroepOnline/opencodex

dependabot · 2026-09-21T07:11:32Z

Bumps the minor-patch group with 4 updates in the / directory: @sentry/bun, bun, @types/bun and zod.

Updates @sentry/bun from 10.74.0 to 10.75.0

Release notes

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size

@sentry/browser 27.18 KB

@sentry/browser - with treeshaking flags 25.66 KB

@sentry/browser (incl. Tracing) 45.6 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.34 KB

@sentry/browser (incl. Tracing, Profiling) 50.24 KB

@sentry/browser (incl. Tracing, Replay) 83.99 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB

@sentry/browser (incl. Feedback) 43.94 KB

@sentry/browser (incl. sendFeedback) 31.87 KB

@sentry/browser (incl. FeedbackAsync) 36.88 KB

@sentry/browser (incl. Metrics) 28.25 KB

@sentry/browser (incl. Logs) 28.47 KB

@sentry/browser (incl. Metrics & Logs) 29.15 KB

@sentry/react 28.93 KB

@sentry/react (incl. Tracing) 47.81 KB

@sentry/vue 32.47 KB

@sentry/vue (incl. Tracing) 47.55 KB

@sentry/svelte 27.21 KB

CDN Bundle 29.53 KB

CDN Bundle (incl. Tracing) 47.52 KB

CDN Bundle (incl. Logs, Metrics) 31.07 KB

CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB

CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB

CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @sentry/bun's changelog.

10.75.0

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)

fix(v10/browser): Release the XHR virtualError once the request completed (#24307)

fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)

fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)

fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)

fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)

fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)

fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)

fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)

fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Commits

9ffb58c release: 10.75.0
664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
Additional commits viewable in compare view

Updates bun from 1.4.0 to 1.4.2

Release notes

Sourced from bun's releases.

Bun v1.4.2

To install Bun v1.4.2
curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.sh/install.ps1|iex"
To upgrade to Bun v1.4.2:
bun upgrade
Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

@dylan-conway

@jarred-sumner

@robobun

Bun v1.4.1

To install Bun v1.4.1
curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.sh/install.ps1|iex"
To upgrade to Bun v1.4.1:
bun upgrade
Read Bun v1.4.1's release notes on Bun's blog

Thanks to 7 contributors!

@alii

@dylan-conway

... (truncated)

Commits

744846f Bump to 1.4.2
7b0b70e Decode CMYK and YCCK JPEGs in Bun.Image (#31898)
7e37445 WebKit 2e2aa2290fac: JSArray shift/splice/setLength cleared live butterfly sl...
814fa03 Remove the unused function-slot vector from JSCommonJSExtensions (#41405)
9584239 WebKit fbd894680a6c: IC stub routine watchpoints could outlive the cells thei...
86b2e06 install: key the lockfile string pool by the bytes, not a stored hash (#41366)
5fb9ecb Reject json() with the JSON.parse SyntaxError on the buffered path (#41387)
74326db AsyncLocalStorage: don't retain the outer store from exit() / nested run() (#...
3044dc6 io: leave the fd with the caller when a POSIX pipe writer fails to start (#38...
9fdcf5a worker_threads: post 'online' before the entry point runs (#41383)
Additional commits viewable in compare view

Updates @types/bun from 1.4.0 to 1.4.2

Commits

See full diff in compare view

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post

f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections

de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)

56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)

ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"

cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""

0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5

59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)

ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)

2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump

f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged

75d63ee1 docs: show only the .properties() method form in the 4.6 post

46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585

0c483c58 docs: the Zod 4.6 announcement post (#6546)

a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577

dd9c36fa fix(v4): defer recursive object index inference (#6580)

3b154992 feat(lang): add Tajik (tg) locale (#6581) by @ismoil77

2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.
npm install zod@latest
At a glance:

... (truncated)

Commits

59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
0f3f5ee 4.6.5
cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
743aedb 4.6.4
Additional commits viewable in compare view

Updates @types/bun from 1.4.0 to 1.4.2

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Repository verification

Repair head: fb2721fdd150d9d70046fc083c5ea1322b97ec88.
Regenerated the root lockfile and aligned the shipped Bun 1.4.2 pin across CI, release, the container build, @types/bun, and the owning install-contract assertions. Workflow triggers, runners, permissions, publication conditions, and deployment behavior are unchanged.
Full clean prepush on Bun 1.4.2: 6,969 passed, 14 skipped, 0 failed; typecheck, GUI lint, privacy scan, and the non-GUI Doctor selector passed.
Root and GUI high-severity audits passed. The root JSON audit matches the existing main baseline (three moderate Hono advisories); the GUI audit is empty.
No release, container build, deployment, merge, or fleet operation was performed. Exact-head GitHub checks remain authoritative.

🤖 Generated with Claude Code

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the minor-patch group with 4 updates in the / directory: [@sentry/bun](https://github.com/getsentry/sentry-javascript), [bun](https://github.com/oven-sh/bun), [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) and [zod](https://github.com/colinhacks/zod). Updates `@sentry/bun` from 10.74.0 to 10.75.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.74.0...10.75.0) Updates `bun` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/oven-sh/bun/releases) - [Commits](oven-sh/bun@bun-v1.4.0...bun-v1.4.2) Updates `@types/bun` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) Updates `zod` from 4.5.4 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.5) Updates `@types/bun` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) --- updated-dependencies: - dependency-name: "@sentry/bun" dependency-version: 10.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: bun dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: "@types/bun" dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@types/bun" dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-21T07:11:32Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-09-21T07:11:38Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: GroepOnline/opencodex/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: ad178718-f796-4e61-bf01-845bb04978f3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Synchronize the existing Bun 1.4.2, Sentry 10.75.0 and Zod 4.6.5 update with the root lockfile. Verify CI, release and container stages with the packaged Bun version and keep @types/bun aligned. Preserve workflow triggers, runners, permissions and publication gates. Co-Authored-By: Claude Code <noreply@anthropic.com>

socket-security · 2026-09-25T10:39:05Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
@types/bun@1.4.0 ⏵ 1.4.2		^-1
bun@1.4.0 ⏵ 1.4.2	⁺¹	⁺¹
@sentry/bun@10.74.0 ⏵ 10.75.0		⁺¹
zod@4.5.4 ⏵ 4.6.5

View full report

socket-security · 2026-09-25T10:39:07Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `bun-types` under unrecognized license License: unrecognized license - This license was not allowed or given any lesser classification by the applicable policy (package/docs/project/license.mdx) License: LGPL-2.0 - The applicable license policy does not permit this license (5) (package/docs/project/license.mdx) From: package.json → `npm/@types/bun@1.4.2` → `npm/bun-types@1.4.2` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/bun-types@1.4.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

…s-20260925

github-actions Bot added the chore label Sep 21, 2026

Merge remote-tracking branch 'origin/main' into repair/pr264-root-dep…

dd0dad0

…s-20260925

MisterWanted merged commit a07bc0a into main Sep 25, 2026
22 of 23 checks passed

MisterWanted deleted the dependabot/npm_and_yarn/main/minor-patch-6af399d75e branch September 25, 2026 11:07

Navigation Menu

build(deps): bump the minor-patch group across 1 directory with 4 updates - #264

build(deps): bump the minor-patch group across 1 directory with 4 updates#264
MisterWanted merged 3 commits into
mainfrom
dependabot/npm_and_yarn/main/minor-patch-6af399d75e

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited by MisterWanted

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Sep 25, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 25, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Path	Size
`@sentry/browser`	27.18 KB
`@sentry/browser` - with treeshaking flags	25.66 KB
`@sentry/browser` (incl. Tracing)	45.6 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.34 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.24 KB
`@sentry/browser` (incl. Tracing, Replay)	83.99 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.84 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.6 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.94 KB
`@sentry/browser` (incl. Feedback)	43.94 KB
`@sentry/browser` (incl. sendFeedback)	31.87 KB
`@sentry/browser` (incl. FeedbackAsync)	36.88 KB
`@sentry/browser` (incl. Metrics)	28.25 KB
`@sentry/browser` (incl. Logs)	28.47 KB
`@sentry/browser` (incl. Metrics & Logs)	29.15 KB
`@sentry/react`	28.93 KB
`@sentry/react` (incl. Tracing)	47.81 KB
`@sentry/vue`	32.47 KB
`@sentry/vue` (incl. Tracing)	47.55 KB
`@sentry/svelte`	27.21 KB
CDN Bundle	29.53 KB
CDN Bundle (incl. Tracing)	47.52 KB
CDN Bundle (incl. Logs, Metrics)	31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.49 KB
CDN Bundle (incl. Tracing, Replay)	84.22 KB

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited by MisterWanted Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.75.0

Important Changes

Other Changes

Bundle size 📦

10.75.0

Important Changes

Other Changes

Bun v1.4.2

Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

Bun v1.4.1

Read Bun v1.4.1's release notes on Bun's blog

Thanks to 7 contributors!

v4.6.5

Commits:

v4.6.4

v4.6.3

v4.6.2

v4.6.1

v4.6.0

Repository verification

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Labels

Uh oh!

coderabbitai Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited by MisterWanted

Loading

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

socket-security Bot commented Sep 25, 2026 •

edited

Loading

socket-security Bot commented Sep 25, 2026 •

edited

Loading