Skip to content

Bump the production-dependencies group across 1 directory with 54 updates - #2544

Merged
myieye merged 6 commits into
developfrom
dependabot/npm_and_yarn/frontend/develop/production-dependencies-c1d995847f
Aug 17, 2026
Merged

Bump the production-dependencies group across 1 directory with 54 updates#2544
myieye merged 6 commits into
developfrom
dependabot/npm_and_yarn/frontend/develop/production-dependencies-c1d995847f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 54 updates in the /frontend directory:

Package From To
@floating-ui/dom 1.7.4 1.8.0
@opentelemetry/api 1.9.0 1.9.1
@opentelemetry/auto-instrumentations-node 0.75.0 0.79.0
@opentelemetry/auto-instrumentations-web 0.54.0 0.66.0
@opentelemetry/context-zone 2.2.0 2.10.0
@opentelemetry/core 2.2.0 2.10.0
@opentelemetry/exporter-trace-otlp-http 0.208.0 0.221.0
@opentelemetry/instrumentation 0.208.0 0.221.0
@opentelemetry/resources 2.2.0 2.10.0
@opentelemetry/sdk-node 0.217.0 0.221.0
@opentelemetry/sdk-trace-web 2.2.0 2.10.0
@opentelemetry/semantic-conventions 1.38.0 1.43.0
css-tree 3.1.0 3.2.1
e2e-mailbox 1.1.5 1.1.7
mjml 4.17.1 5.4.0
set-cookie-parser 2.7.2 3.1.2
type-fest 5.3.0 5.8.0
@formatjs/intl-durationformat 0.7.6 0.10.18
@lingui/core 5.9.2 6.6.0
@microsoft/dotnet-js-interop 10.0.0 10.0.11
@microsoft/signalr 10.0.0 10.0.11
jsdom 26.1.0 30.0.1
prosemirror-commands 1.7.1 1.7.2
prosemirror-model 1.25.4 1.25.11
prosemirror-view 1.41.3 1.42.2
svelte-dnd-action 0.9.69 0.9.78
tabbable 6.4.0 6.5.0
virtua 0.48.6 0.50.1
wavesurfer.js 7.12.1 7.12.11
tailwindcss 4.2.1 4.3.3
@playwright/test 1.60.0 1.62.1
@stylistic/eslint-plugin 5.9.0 5.10.0
@sveltejs/vite-plugin-svelte 6.2.4 7.2.0
@typescript-eslint/parser 8.56.1 8.66.0
@vitejs/plugin-basic-ssl 2.1.4 2.3.0
@vitest/browser-playwright 4.0.18 4.1.10
@vitest/browser 4.0.18 4.1.10
@vitest/ui 4.0.18 4.1.10
autoprefixer 10.4.22 10.5.4
eslint-output 4.0.2 4.1.0
eslint-plugin-svelte 3.15.0 3.22.0
eslint 9.39.3 10.8.0
playwright 1.60.0 1.62.1
postcss 8.5.15 8.5.26
runed 0.23.4 0.37.1
svelte-check 4.4.4 4.7.5
svelte-eslint-parser 1.5.1 1.8.0
svelte-preprocess 6.0.3 6.0.5
svelte 5.56.0 5.56.8
tslib 2.4.0 2.8.1
typescript-eslint 8.56.1 8.66.0
typescript 5.9.3 7.0.2
vite 7.3.3 8.2.1
vitest 4.0.18 4.1.10

Updates @floating-ui/dom from 1.7.4 to 1.8.0

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.8.0

Minor Changes

  • feat: add 'layoutViewport' string option to rootBoundary. Unlike the visual 'viewport' boundary, it remains stable while pinch-zooming or when a mobile software keyboard is open, and unlike a manually passed Rect of the documentElement's client size, it accounts for space reserved by scrollbar-gutter: stable.

Patch Changes

  • fix: remove redundant passive options from scroll listeners
  • fix: support explicit undefined for optional properties with exactOptionalPropertyTypes
  • fix(autoUpdate): update immediately instead of waiting for the 1s layoutShift refresh throttle when the reference moved during an observer refresh
  • fix(getClippingRect): correct clipping-ancestor filtering for fixed-position elements
  • perf(dom): reduce bundle size and skip redundant per-call work in positioning utilities
  • fix(getViewportRect): account for scrollbar-gutter: stable both-edges reserved space
  • fix(getViewportRect): don't overflow past a left-side document scrollbar
  • fix(platform): don't throw in getClientRects when a virtual element without a getClientRects method is used with the inline() middleware
  • fix(autoUpdate): refresh layout shift observer on root resize
  • Update dependencies: @floating-ui/core@1.8.0, @floating-ui/utils@0.2.12

@​floating-ui/dom@​1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
Changelog

Sourced from @​floating-ui/dom's changelog.

1.8.0

Minor Changes

  • feat: add 'layoutViewport' string option to rootBoundary. Unlike the visual 'viewport' boundary, it remains stable while pinch-zooming or when a mobile software keyboard is open, and unlike a manually passed Rect of the documentElement's client size, it accounts for space reserved by scrollbar-gutter: stable.

Patch Changes

  • fix: remove redundant passive options from scroll listeners
  • fix: support explicit undefined for optional properties with exactOptionalPropertyTypes
  • fix(autoUpdate): update immediately instead of waiting for the 1s layoutShift refresh throttle when the reference moved during an observer refresh
  • fix(getClippingRect): correct clipping-ancestor filtering for fixed-position elements
  • perf(dom): reduce bundle size and skip redundant per-call work in positioning utilities
  • fix(getViewportRect): account for scrollbar-gutter: stable both-edges reserved space
  • fix(getViewportRect): don't overflow past a left-side document scrollbar
  • fix(platform): don't throw in getClientRects when a virtual element without a getClientRects method is used with the inline() middleware
  • fix(autoUpdate): refresh layout shift observer on root resize
  • Update dependencies: @floating-ui/core@1.8.0, @floating-ui/utils@0.2.12

1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5

1.7.5

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.4
Commits
  • 12d9473 chore: version packages (#3480)
  • ad0a73f fix(getViewportRect): account for scrollbar-gutter: stable both-edges reser...
  • 9887c96 fix(types): restore bivariant parameters for optional callbacks
  • 28bc9c1 fix(autoUpdate): avoid duplicate update on window resize
  • 5976f20 test(dom): run unit tests in vitest browser mode
  • 705a03c fix(platform): support virtual elements without getClientRects in inline() (#...
  • 3785f3b feat: add layoutViewport string option to rootBoundary (#3486)
  • 0d0e88e fix(inline): no-op on empty client rects and detect RTL disjoined line rects ...
  • 73c1f76 fix(types): support exactOptionalPropertyTypes (#3456)
  • cd58dd2 fix(getClippingRect): correct clipping-ancestor filtering for fixed-position ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​floating-ui/dom since your current version.


Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @opentelemetry/auto-instrumentations-node from 0.75.0 to 0.79.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

  • auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.79.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

  • auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.65.0 to ^0.66.0

... (truncated)

Commits

Updates @opentelemetry/auto-instrumentations-web from 0.54.0 to 0.66.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-web's releases.

instrumentation-document-load: v0.66.0

0.66.0 (2026-07-23)

⚠ BREAKING CHANGES

  • only emit stable http, network and database attributes (#3585)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)
  • only emit stable http, network and database attributes (#3585) (5b7dd0e)

instrumentation-winston: v0.65.0

0.65.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​opentelemetry/winston-transport bumped from ^0.30.0 to ^0.31.0

instrumentation-router: v0.65.0

0.65.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

instrumentation-restify: v0.66.0

0.66.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

instrumentation-net: v0.65.0

0.65.0 (2026-07-23)

⚠ BREAKING CHANGES

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-web's changelog.

0.66.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-document-load bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-user-interaction bumped from ^0.64.0 to ^0.65.0

0.65.0 (2026-07-03)

Features

  • deps: update deps matching '@opentelemetry/*' (#3593) (6dfb532)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-document-load bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-user-interaction bumped from ^0.63.0 to ^0.64.0

0.64.0 (2026-06-11)

Features

  • deps: update deps matching '@opentelemetry/*' (#3567) (bd569b5)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-document-load bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-user-interaction bumped from ^0.62.0 to ^0.63.0

0.63.0 (2026-05-13)

Features

... (truncated)

Commits

Updates @opentelemetry/context-zone from 2.2.0 to 2.10.0

Release notes

Sourced from @​opentelemetry/context-zone's releases.

v2.10.0

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

v2.9.0

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

... (truncated)

Changelog

Sourced from @​opentelemetry/context-zone's changelog.

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

2.8.0

🚀 Features

... (truncated)

Commits
  • 76fa6b5 chore: prepare next release (#6942)
  • 3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
  • be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
  • f6d8fbe chore(deps): lock file maintenance (#6559)
  • 9612732 chore: remove examples/dice from workspaces (#6937)
  • 7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
  • a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
  • af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
  • b9f57c6 chore(deps): update dependency @​types/webpack-env to v1.18.8 (#6877)
  • cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
  • Additional commits viewable in compare view

Updates @opentelemetry/core from 2.2.0 to 2.10.0

Release notes

Sourced from @​opentelemetry/core's releases.

v2.10.0

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

v2.9.0

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metrics): add maxExportBatchSize option to PeriodicExportingMetricReader #6655 @​psx95
    • Optimized PeriodicExportingMetricReader.forceFlush to prevent redundant concurrent export cycles. Concurrent calls to forceFlush will now await any ongoing export and reuse a fresh export cycle if one is started concurrently by another caller. This ensures the latest metrics are always exported efficiently without triggering duplicate collection and export cycles.
  • feat(sdk-trace): implement span processor metrics #6504 @​anuraaga
  • feat(sdk-trace): add a new "sdk-trace" package to hold the Trace SDK, without environment variable configuration handling that belongs elsewhere #6775 @​trentm
    • "sdk-trace" will eventually replace all of "sdk-trace-base", "sdk-trace-node", and "sdk-trace-web".
    • The BatchSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new BatchSpanProcessor(exporter, { maxQueueSize: 1000 }), after new BatchSpanProcessor({ exporter, maxQueueSize: 1000 }). #6817
    • The SimpleSpanProcessor constructor call signature has changed in "sdk-trace". For example, before new SimpleSpanProcessor(exporter), after new SimpleSpanProcessor({ exporter, selfObsMeterProvider: ... }). #6504
  • feat(sdk-trace): add AlwaysRecordSampler #6188 @​majanjua-amzn

🐛 Bug Fixes

  • fix(propagator-jaeger): do not throw on malformed percent-encoded uber-trace-id / uberctx-* headers during extract @​pichlermarc

🏠 Internal

  • perf(sdk-metrics): defer allocation of HrTime to accumulation creation #6839 @​legendecas
  • chore(*): migrate use of sdk-trace-base and sdk-trace-node to sdk-trace #6851 @​trentm
  • perf(sdk-metrics): optionally capture active context for sync instruments #6848 @​legendecas

... (truncated)

Changelog

Sourced from @​opentelemetry/core's changelog.

2.10.0

🚀 Features

  • feat(sdk-logs): implement log processor metrics #6554 @​anuraaga
  • feat(otlp-exporter): implement exporter metrics #6480 @​anuraaga
  • feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @​pichlermarc
    • The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

  • fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @​LarryHu0217
  • fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @​LarryHu0217

🏠 Internal

2.9.0

💥 Breaking Changes

  • docs(shim-opentracing): Notice: The @opentelemetry/shim-opentracing package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.

🚀 Features

  • feat(sdk-metr...

    Description has been truncated

…ates

Bumps the production-dependencies group with 54 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom) | `1.7.4` | `1.8.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.75.0` | `0.79.0` |
| [@opentelemetry/auto-instrumentations-web](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-web) | `0.54.0` | `0.66.0` |
| [@opentelemetry/context-zone](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.10.0` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.10.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.221.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.208.0` | `0.221.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.10.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.217.0` | `0.221.0` |
| [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `2.2.0` | `2.10.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.38.0` | `1.43.0` |
| [css-tree](https://github.com/csstree/csstree) | `3.1.0` | `3.2.1` |
| [e2e-mailbox](https://github.com/allynsweet/E2E-Mailbox) | `1.1.5` | `1.1.7` |
| [mjml](https://github.com/mjmlio/mjml/tree/HEAD/packages/mjml) | `4.17.1` | `5.4.0` |
| [set-cookie-parser](https://github.com/nfriedly/set-cookie-parser) | `2.7.2` | `3.1.2` |
| [type-fest](https://github.com/sindresorhus/type-fest) | `5.3.0` | `5.8.0` |
| [@formatjs/intl-durationformat](https://github.com/formatjs/formatjs) | `0.7.6` | `0.10.18` |
| [@lingui/core](https://github.com/lingui/js-lingui/tree/HEAD/packages/core) | `5.9.2` | `6.6.0` |
| [@microsoft/dotnet-js-interop](https://github.com/dotnet/extensions) | `10.0.0` | `10.0.11` |
| [@microsoft/signalr](https://github.com/dotnet/aspnetcore) | `10.0.0` | `10.0.11` |
| [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.0.1` |
| [prosemirror-commands](https://github.com/prosemirror/prosemirror-commands) | `1.7.1` | `1.7.2` |
| [prosemirror-model](https://github.com/prosemirror/prosemirror-model) | `1.25.4` | `1.25.11` |
| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.41.3` | `1.42.2` |
| [svelte-dnd-action](https://github.com/isaacHagoel/svelte-dnd-action) | `0.9.69` | `0.9.78` |
| [tabbable](https://github.com/focus-trap/tabbable) | `6.4.0` | `6.5.0` |
| [virtua](https://github.com/inokawa/virtua) | `0.48.6` | `0.50.1` |
| [wavesurfer.js](https://github.com/katspaugh/wavesurfer.js) | `7.12.1` | `7.12.11` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.1` | `4.3.3` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.9.0` | `5.10.0` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `6.2.4` | `7.2.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.66.0` |
| [@vitejs/plugin-basic-ssl](https://github.com/vitejs/vite-plugin-basic-ssl) | `2.1.4` | `2.3.0` |
| [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.0.18` | `4.1.10` |
| [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.0.18` | `4.1.10` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.0.18` | `4.1.10` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.22` | `10.5.4` |
| [eslint-output](https://github.com/lwhiteley/eslint-output) | `4.0.2` | `4.1.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.15.0` | `3.22.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.3` | `10.8.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.26` |
| [runed](https://github.com/svecosystem/runed/tree/HEAD/packages/runed) | `0.23.4` | `0.37.1` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.4` | `4.7.5` |
| [svelte-eslint-parser](https://github.com/sveltejs/svelte-eslint-parser) | `1.5.1` | `1.8.0` |
| [svelte-preprocess](https://github.com/sveltejs/svelte-preprocess) | `6.0.3` | `6.0.5` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.0` | `5.56.8` |
| [tslib](https://github.com/Microsoft/tslib) | `2.4.0` | `2.8.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.1` | `8.66.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.3` | `8.2.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.10` |



Updates `@floating-ui/dom` from 1.7.4 to 1.8.0
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.8.0/packages/dom)

Updates `@opentelemetry/api` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1)

Updates `@opentelemetry/auto-instrumentations-node` from 0.75.0 to 0.79.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.79.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/auto-instrumentations-web` from 0.54.0 to 0.66.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-web/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.66.0/packages/auto-instrumentations-web)

Updates `@opentelemetry/context-zone` from 2.2.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.10.0)

Updates `@opentelemetry/core` from 2.2.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.10.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.208.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.221.0)

Updates `@opentelemetry/instrumentation` from 0.208.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.221.0)

Updates `@opentelemetry/resources` from 2.2.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.10.0)

Updates `@opentelemetry/sdk-node` from 0.217.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.217.0...experimental/v0.221.0)

Updates `@opentelemetry/sdk-trace-web` from 2.2.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.2.0...v2.10.0)

Updates `@opentelemetry/semantic-conventions` from 1.38.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.38.0...semconv/v1.43.0)

Updates `css-tree` from 3.1.0 to 3.2.1
- [Release notes](https://github.com/csstree/csstree/releases)
- [Changelog](https://github.com/csstree/csstree/blob/master/CHANGELOG.md)
- [Commits](csstree/csstree@v3.1.0...v3.2.1)

Updates `e2e-mailbox` from 1.1.5 to 1.1.7
- [Commits](https://github.com/allynsweet/E2E-Mailbox/commits)

Updates `mjml` from 4.17.1 to 5.4.0
- [Release notes](https://github.com/mjmlio/mjml/releases)
- [Commits](https://github.com/mjmlio/mjml/commits/v5.4.0/packages/mjml)

Updates `set-cookie-parser` from 2.7.2 to 3.1.2
- [Changelog](https://github.com/nfriedly/set-cookie-parser/blob/master/CHANGELOG.md)
- [Commits](nfriedly/set-cookie-parser@v2.7.2...v3.1.2)

Updates `type-fest` from 5.3.0 to 5.8.0
- [Release notes](https://github.com/sindresorhus/type-fest/releases)
- [Commits](sindresorhus/type-fest@v5.3.0...v5.8.0)

Updates `@formatjs/intl-durationformat` from 0.7.6 to 0.10.18
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/@formatjs/intl-durationformat@0.7.6...@formatjs/intl-durationformat@0.10.18)

Updates `@lingui/core` from 5.9.2 to 6.6.0
- [Release notes](https://github.com/lingui/js-lingui/releases)
- [Changelog](https://github.com/lingui/js-lingui/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/lingui/js-lingui/commits/v6.6.0/packages/core)

Updates `@microsoft/dotnet-js-interop` from 10.0.0 to 10.0.11
- [Release notes](https://github.com/dotnet/extensions/releases)
- [Commits](https://github.com/dotnet/extensions/commits)

Updates `@microsoft/signalr` from 10.0.0 to 10.0.11
- [Release notes](https://github.com/dotnet/aspnetcore/releases)
- [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md)
- [Commits](https://github.com/dotnet/aspnetcore/commits)

Updates `jsdom` from 26.1.0 to 30.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v30.0.1)

Updates `prosemirror-commands` from 1.7.1 to 1.7.2
- [Changelog](https://github.com/ProseMirror/prosemirror-commands/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-commands/commits)

Updates `prosemirror-model` from 1.25.4 to 1.25.11
- [Changelog](https://github.com/ProseMirror/prosemirror-model/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-model/commits)

Updates `prosemirror-view` from 1.41.3 to 1.42.2
- [Changelog](https://github.com/ProseMirror/prosemirror-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-view/commits)

Updates `svelte-dnd-action` from 0.9.69 to 0.9.78
- [Changelog](https://github.com/isaacHagoel/svelte-dnd-action/blob/master/release-notes.md)
- [Commits](https://github.com/isaacHagoel/svelte-dnd-action/commits)

Updates `tabbable` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/focus-trap/tabbable/releases)
- [Changelog](https://github.com/focus-trap/tabbable/blob/master/CHANGELOG.md)
- [Commits](focus-trap/tabbable@v6.4.0...v6.5.0)

Updates `virtua` from 0.48.6 to 0.50.1
- [Release notes](https://github.com/inokawa/virtua/releases)
- [Commits](inokawa/virtua@0.48.6...0.50.1)

Updates `wavesurfer.js` from 7.12.1 to 7.12.11
- [Release notes](https://github.com/katspaugh/wavesurfer.js/releases)
- [Changelog](https://github.com/katspaugh/wavesurfer.js/blob/main/CHANGELOG.md)
- [Commits](katspaugh/wavesurfer.js@7.12.1...7.12.11)

Updates `tailwindcss` from 4.2.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@playwright/test` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `@stylistic/eslint-plugin` from 5.9.0 to 5.10.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/v5.10.0/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.10.0/packages/eslint-plugin)

Updates `@sveltejs/vite-plugin-svelte` from 6.2.4 to 7.2.0
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.2.0/packages/vite-plugin-svelte)

Updates `@typescript-eslint/parser` from 8.56.1 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/parser)

Updates `@vitejs/plugin-basic-ssl` from 2.1.4 to 2.3.0
- [Release notes](https://github.com/vitejs/vite-plugin-basic-ssl/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-basic-ssl/blob/main/CHANGELOG.md)
- [Commits](vitejs/vite-plugin-basic-ssl@v2.1.4...v2.3.0)

Updates `@vitest/browser-playwright` from 4.0.18 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright)

Updates `@vitest/browser` from 4.0.18 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser)

Updates `@vitest/ui` from 4.0.18 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/ui)

Updates `autoprefixer` from 10.4.22 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.22...10.5.4)

Updates `eslint-output` from 4.0.2 to 4.1.0
- [Commits](lwhiteley/eslint-output@v4.0.2...v4.1.0)

Updates `eslint-plugin-svelte` from 3.15.0 to 3.22.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.22.0/packages/eslint-plugin-svelte)

Updates `eslint` from 9.39.3 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v10.8.0)

Updates `playwright` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `postcss` from 8.5.15 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.26)

Updates `runed` from 0.23.4 to 0.37.1
- [Release notes](https://github.com/svecosystem/runed/releases)
- [Changelog](https://github.com/svecosystem/runed/blob/main/packages/runed/CHANGELOG.md)
- [Commits](https://github.com/svecosystem/runed/commits/runed@0.37.1/packages/runed)

Updates `svelte-check` from 4.4.4 to 4.7.5
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.4...svelte-check@4.7.5)

Updates `svelte-eslint-parser` from 1.5.1 to 1.8.0
- [Release notes](https://github.com/sveltejs/svelte-eslint-parser/releases)
- [Changelog](https://github.com/sveltejs/svelte-eslint-parser/blob/main/CHANGELOG.md)
- [Commits](sveltejs/svelte-eslint-parser@v1.5.1...v1.8.0)

Updates `svelte-preprocess` from 6.0.3 to 6.0.5
- [Release notes](https://github.com/sveltejs/svelte-preprocess/releases)
- [Changelog](https://github.com/sveltejs/svelte-preprocess/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte-preprocess/compare/v6.0.3...svelte-preprocess@6.0.5)

Updates `svelte` from 5.56.0 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `tslib` from 2.4.0 to 2.8.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@2.4.0...v2.8.1)

Updates `typescript-eslint` from 8.56.1 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 7.3.3 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

Updates `vitest` from 4.0.18 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-web"
  dependency-version: 0.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/context-zone"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/sdk-trace-web"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: css-tree
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: e2e-mailbox
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: mjml
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: set-cookie-parser
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: type-fest
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@formatjs/intl-durationformat"
  dependency-version: 0.10.18
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@lingui/core"
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@microsoft/dotnet-js-interop"
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@microsoft/signalr"
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: prosemirror-commands
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: prosemirror-model
  dependency-version: 1.25.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: prosemirror-view
  dependency-version: 1.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: svelte-dnd-action
  dependency-version: 0.9.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tabbable
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: virtua
  dependency-version: 0.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: wavesurfer.js
  dependency-version: 7.12.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitejs/plugin-basic-ssl"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitest/browser-playwright"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitest/browser"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: eslint-output
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: runed
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: svelte-check
  dependency-version: 4.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: svelte-eslint-parser
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: svelte-preprocess
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: svelte
  dependency-version: 5.56.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tslib
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026
@github-actions github-actions Bot added 💻 FW Lite issues related to the fw lite application, not miniLcm or crdt related 📦 Lexbox issues related to any server side code, fw-headless included labels Aug 10, 2026
myieye and others added 3 commits August 14, 2026 10:37
Dependabot wrote a pinned version where package.json uses `catalog:`, so
every job failed at `pnpm install --frozen-lockfile`.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The group pulled in four upgrades that can't land as a version bump:

- typescript 7: typescript-eslint 8.x refuses to run against it
  ("does not support TS 7.0"), which also broke the viewer's vite config
  via lingui's extractor.
- tailwindcss 4 (catalog): the lexbox web app is still tailwind 3 +
  daisyUI 4, so its postcss config can't load (`tailwindcss/nesting`).
- mjml 5 + @types/mjml 5: mjml2html is async there, so the email
  renderer needs reworking.
- e2e-mailbox 1.1.7: its new `exports` field has no types entry, so the
  package resolves to `any` (upstream bug).

Also pin @types/mjml-core, which @types/mjml depends on as `*` and so
resolved to the v5 typings (async mjml2html) against the v4 runtime.

The rest of the group lands, with these fixes:

- @formatjs/intl-durationformat 0.10 only exports `./polyfill.js`.
- set-cookie-parser 3 ships its own types (so @types/set-cookie-parser
  goes) and types parseString as nullable.
- type-fest 5.8's ConditionalPick resolves to `never` for an unresolved
  generic, so getBoolSearchParam has to exclude number|symbol keys the
  way getSearchParam already does.
- typescript-eslint 8.66 flags vitest spy assertions and our global-fetch
  swapping as unbound methods, and finds three assertions it no longer
  needs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@argos-ci

argos-ci Bot commented Aug 17, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Argos notifications ↗︎

Build Status Details Updated (UTC)
default (Inspect) ✅ No changes detected - Aug 17, 2026, 9:41 AM
e2e (Inspect) ✅ No changes detected - Aug 17, 2026, 9:51 AM

myieye and others added 2 commits August 17, 2026 11:10
The group bumped the runtime to ^6.6.0 while @lingui/cli, /format-json
and /vite-plugin all stay on ^5, so v5-compiled catalogs would be handed
to a v6 runtime. Whole toolchain moves together or not at all.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Vite 8's script transform inlines a component-local TS enum and drops its
declaration, but it never touches the markup, so every `{#if step ===
Steps.Foo}` in the template was left referencing an undefined binding.
That threw `ReferenceError: ResetSteps is not defined` on click and put up
the generic error dialog instead of the modal, failing resetProject.test.ts;
bulk-add-members was broken the same way with no test to catch it.

Exporting from a module script — what Modal.svelte and TusUpload.svelte
already do — makes the transform emit a real object.

Worth a follow-up: `erasableSyntaxOnly` in tsconfig would turn this class
of silent breakage into a compile error.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@myieye

myieye commented Aug 17, 2026

Copy link
Copy Markdown
Collaborator

[Claude, autonomous]

CI is green now. The group needed some surgery, so the description above is no longer accurate — five packages were held back:

Package Held at Why
typescript 5.9 typescript-eslint 8.x refuses to run against TS 7 ("does not support TS 7.0")
tailwindcss (catalog) 3.4 the web app is still tailwind 3 + daisyUI 4; v4 breaks its postcss config
mjml + @types/mjml 4.x mjml2html is async in v5, so the email renderer needs reworking
@lingui/core 5.6 @lingui/cli, /format-json and /vite-plugin are all still v5
e2e-mailbox 1.1.5 1.1.7's exports field has no types entry, so it resolves to any (upstream bug)

Each of those wants its own PR. Also pinned @types/mjml-core, which @types/mjml depends on as * and so resolved to the v5 typings (async mjml2html) against the v4 runtime.

The rest of the group lands. Fixes needed along the way:

  • @formatjs/intl-durationformat 0.10 only exports ./polyfill.js.
  • set-cookie-parser 3 ships its own types (so @types/set-cookie-parser goes) and types parseString as nullable. Verified v2 and v3 parse our auth cookie header identically.
  • type-fest 5.8's ConditionalPick resolves to never for an unresolved generic, so getBoolSearchParam has to exclude number|symbol keys the way getSearchParam already does.
  • typescript-eslint 8.66 flags vitest spy assertions and our global-fetch swapping as unbound methods, and finds three assertions it no longer needs.

Worth a look: vite 8's script transform inlines a component-local TS enum and drops the declaration, but never touches the markup — so every {#if step === Steps.Foo} in a template was left referencing an undefined binding. That threw ReferenceError: ResetSteps is not defined on click and showed the generic error dialog instead of the reset modal (caught by resetProject.test.ts). Bulk-add-members was broken the same way, with no test to catch it. All five enums in .svelte files now live in module scripts, which is what Modal.svelte and TusUpload.svelte already did.

That failure mode is silent — the build is perfectly happy. erasableSyntaxOnly in tsconfig would turn it into a compile error, but it flags all five enums so it belongs in its own PR.

@myieye
myieye merged commit c3fc08e into develop Aug 17, 2026
35 of 36 checks passed
@myieye
myieye deleted the dependabot/npm_and_yarn/frontend/develop/production-dependencies-c1d995847f branch August 17, 2026 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file 💻 FW Lite issues related to the fw lite application, not miniLcm or crdt related 📦 Lexbox issues related to any server side code, fw-headless included

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant