Skip to content

chore(deps): bump the minor-and-patch group across 2 directories with 16 updates - #267

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c65165dfb8
Open

chore(deps): bump the minor-and-patch group across 2 directories with 16 updates#267
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c65165dfb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates in the / directory:

Package From To
@eslint/compat 2.0.5 2.1.0
@eslint/js 9.39.4 9.39.5
@sentry/react-native 8.15.1 8.24.0
@types/node 24.12.2 24.13.3
babel-preset-expo 56.0.15 56.0.20
expo 56.0.12 56.0.21
globals 17.5.0 17.12.0
prettier 3.8.3 3.9.6
react 19.2.3 19.2.8
@types/react 19.2.14 19.2.18
type-fest 5.6.0 5.9.0
typescript-eslint 8.59.0 8.69.0

Bumps the minor-and-patch group with 3 updates in the /backend directory: @sentry/core, @sentry/node-core and @sentry/bundler-plugins.

Updates @eslint/compat from 2.0.5 to 2.1.0

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.1.0

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

migrate-config: v2.1.0

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/config-helpers bumped from ^0.5.5 to ^0.6.0

migrate-config: v2.0.7

2.0.7 (2026-05-01)

Bug Fixes

migrate-config: v2.0.6

2.0.6 (2026-04-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.4 to ^2.0.5
    • devDependencies
      • @​eslint/core bumped from ^1.2.0 to ^1.2.1
Changelog

Sourced from @​eslint/compat's changelog.

2.1.0 (2026-05-08)

Features

  • Add new includeIgnoreFile() to config-helpers (#430) (9b51352)
Commits

Updates @eslint/js from 9.39.4 to 9.39.5

Release notes

Sourced from @​eslint/js's releases.

v9.39.5

Bug Fixes

Documentation

  • 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
  • eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)
Commits

Updates @sentry/react-native from 8.15.1 to 8.24.0

Release notes

Sourced from @​sentry/react-native's releases.

8.24.0

Features

  • Add enableNdkAppHangTracking and ndkAppHangTimeoutIntervalMillis options to enable Android NDK app hang tracking (#6548)

Fixes

  • Warn when replay sample rates are set but the Replay integration is missing (#6612)
  • Fix time to display spans causing transactions to be dropped by Relay (#6608)
  • Fix Expo iOS build failing when the project path contains spaces (#6604)
  • Fix Android fragment memory leak in RNSentryReactFragmentLifecycleTracer (#6599)
  • Ship a named navigation transaction when re-navigating to the focused route with new params, instead of an unnamed "Route Change" (#6606)

Dependencies

8.23.0

Changes

  • Migrate iOS internals from the deprecated PrivateSentrySDKOnly SPI to SentrySDK.internal (#6541)

    Re-lands #6380, reverted in 8.20.0 by #6491 because it broke iOS screenshot capture. The underlying sentry-cocoa bug is fixed in 9.24.0.

[!WARNING] Action required if you target React Native < 0.75. RNSentry now ships Swift code, which makes it a Swift pod under CocoaPods. If your Podfile doesn't already modularize React Native's ObjC pods (RN >= 0.75 does this by default), add use_modular_headers! to your ios/Podfile before running pod install. Otherwise pod install fails with an error like: The Swift pod 'RNSentry' depends upon 'React-hermes', which does not define modules.

Fixes

  • Send SDK-internal diagnostics to the debug logger instead of the Sentry Logs API (#6585)

    Ten internal warnings in the TurboModule instrumentation, scope sync and the Expo Router error boundary were written against logger, which captures a log record and sends it to your project. They now go to debug, printed only when the SDK is initialized with debug: true.

  • Measure callback-style native module calls until their completion callback fires (#6561)

    Bridge methods that report completion through success/failure callbacks instead of a Promise return undefined, so they were recorded as sync calls with a near-zero duration. Their turbo_module.* durations are now correct, and slow ones produce a native.turbo_module breadcrumb. On the Old Architecture a failure callback is also counted as an error, following React Native's own (failure, success) trailing-argument convention.

  • Resolve config-plugins through the expo package in the Expo config plugin (#6581)

  • Make the RNSentry SPEC CHECKSUM in Podfile.lock machine-independent (#6534)

... (truncated)

Changelog

Sourced from @​sentry/react-native's changelog.

8.24.0

Features

  • Add enableNdkAppHangTracking and ndkAppHangTimeoutIntervalMillis options to enable Android NDK app hang tracking (#6548)

Fixes

  • Warn when replay sample rates are set but the Replay integration is missing (#6612)
  • Fix time to display spans causing transactions to be dropped by Relay (#6608)
  • Fix Expo iOS build failing when the project path contains spaces (#6604)
  • Fix Android fragment memory leak in RNSentryReactFragmentLifecycleTracer (#6599)
  • Ship a named navigation transaction when re-navigating to the focused route with new params, instead of an unnamed "Route Change" (#6606)

Dependencies

8.23.0

Changes

  • Migrate iOS internals from the deprecated PrivateSentrySDKOnly SPI to SentrySDK.internal (#6541)

    Re-lands #6380, reverted in 8.20.0 by #6491 because it broke iOS screenshot capture. The underlying sentry-cocoa bug is fixed in 9.24.0.

[!WARNING] Action required if you target React Native < 0.75. RNSentry now ships Swift code, which makes it a Swift pod under CocoaPods. If your Podfile doesn't already modularize React Native's ObjC pods (RN >= 0.75 does this by default), add use_modular_headers! to your ios/Podfile before running pod install. Otherwise pod install fails with an error like: The Swift pod 'RNSentry' depends upon 'React-hermes', which does not define modules.

Fixes

  • Send SDK-internal diagnostics to the debug logger instead of the Sentry Logs API (#6585)

    Ten internal warnings in the TurboModule instrumentation, scope sync and the Expo Router error boundary were written against logger, which captures a log record and sends it to your project. They now go to debug, printed only when the SDK is initialized with debug: true.

  • Measure callback-style native module calls until their completion callback fires (#6561)

    Bridge methods that report completion through success/failure callbacks instead of a Promise return undefined, so they were recorded as sync calls with a near-zero duration. Their turbo_module.* durations are now correct, and slow ones produce a native.turbo_module breadcrumb. On the Old Architecture a failure callback is also counted as an error, following React Native's own (failure, success) trailing-argument convention.

  • Resolve config-plugins through the expo package in the Expo config plugin (#6581)

... (truncated)

Commits
  • 87bdc65 release: 8.24.0
  • 7f88878 fix(ios): Stay on Cocoa SDK 9.24.0 (revert 9.26.0 bump) (#6622)
  • f65535b chore: update scripts/update-maestro.sh to v2.9.0 (#6620)
  • 8e3cabb fix(replay): Warn when replay sample rates are set but the Replay integration...
  • f0619dc fix(tracing): Name transaction when re-navigating to focused route with new p...
  • 2e64504 fix(tracing): keep time to display spans within transaction bounds (#6608)
  • f6ce4ff chore: update scripts/update-javascript.sh to 10.71.0 (#6610)
  • f8d1a37 chore: update scripts/update-wizard.sh to v7.0.3 (#6611)
  • fd963e7 fix(ios): Quote script paths so Expo iOS build works with spaces in the proje...
  • d6784d9 fix(deps): Bump deepmerge-ts to ^8.0.0 to resolve stack-exhaustion advisory (...
  • Additional commits viewable in compare view

Updates @types/node from 24.12.2 to 24.13.3

Commits

Updates babel-preset-expo from 56.0.15 to 56.0.20

Changelog

Sourced from babel-preset-expo's changelog.

Changelog

Unpublished

🛠 Breaking changes

🎉 New features

  • Add ios, android, macos, tvos per-platform override support (#46508 by @​kitten)

🐛 Bug fixes

  • Escape backslashes when serializing 'widget' functions so escape sequences like \n in a widget layout survive the template-literal round-trip instead of corrupting the stored function and crashing the widget with SyntaxError: Unexpected EOF. (#47626 by @​alecmolloy)
  • Fix legacy decorators on class properties when corresponding class transforms are disabled, which the decorators plugin relies on (#47724 by @​Gitarcitano, @​kitten)
  • Disable @babel/plugin-transform-object-rest-spread in Hermes v1 and Modern Web sub-presets. The ordering dependence on @babel/plugin-transform-destructuring could cause computed exclusion to be missed (#49278 by @​kitten)

💡 Others

57.0.5 - 2026-07-29

This version does not introduce any user-facing changes.

57.0.4 - 2026-07-22

This version does not introduce any user-facing changes.

57.0.3 - 2026-07-15

This version does not introduce any user-facing changes.

57.0.2 - 2026-07-07

This version does not introduce any user-facing changes.

57.0.1 - 2026-06-30

This version does not introduce any user-facing changes.

57.0.0 - 2026-06-25

🐛 Bug fixes

  • Bump babel-plugin-syntax-hermes-parser to ^0.36.0 to parse newer Flow syntax (e.g. readonly property modifiers) shipped in recent React Native versions (#46636 by @​zoontek)
  • Inline EXPO_PUBLIC_USE_RN_FETCH inside node_modules so the expo/fetch opt-out works in production builds. (#46986 by @​intergalacticspacehighway)
Commits

Updates expo from 56.0.12 to 56.0.21

Changelog

Sourced from expo's changelog.

Changelog

Unpublished

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

  • [iOS] Fix a Hermes JSI crash during reloads where two overlapping RCTHost runtime callbacks shared EXReactNativeFactory's app context ivar, letting one callback decorate objects against the other callback's runtime. (#48576 by @​LizunovSergey)
  • [iOS] Fix expo/fetch streaming race between URLSession delegate callbacks and startStreaming() that could deliver an empty body on a 200 response, drop chunks, or leave the body stream open. (#47796 by @​idoyana)
  • Fix expo/fetch body-stream teardown races: aborting via an AbortSignal now rejects the in-flight read with an AbortError instead of hanging forever, and late native events no longer throw The stream is not in a state that permits enqueue/close from outside any consumer try/catch. (#47573 by @​idoyana)
  • [iOS] Fix expo/fetch Response.text() and .arrayBuffer() never settling when the request fails (network drop, abort()) after the response was already delivered. (#48230 by @​zoontek)
  • Fix iOS build against React Native 0.87+ by dropping the legacy architecture (bridge) RCTRootViewFactoryConfiguration setup. (#46641 by @​zoontek)
  • Adopted the UIKit scene-based life cycle on iOS so apps built with the iOS 27 SDK launch correctly. (#46733 by @​alanjhughes)
  • [iOS] Mark ExpoAppSceneDelegate as unavailable in extensions. (#46799 by @​jakex7)
  • [iOS] Fix Linking.getInitialURL() returning null and deep links being dropped when a URL cold-starts an app on the UIKit scene life cycle. (#47628 by @​tsapeta)
  • [iOS] Mark ExpoAppSceneDelegate as unavailable in iOSApplicationExtension for widgets. (#47894 by @​jakex7)
  • [iOS] Add ExpoBundleConfiguration to derive RCTBundleConfiguration from the normalized bundle URL instead of default shared settings singleton (#48010 by @​kitten)
  • [iOS] Resolve the dev server port from the RCTMetroPort Info.plist key at runtime so bare projects without expo-dev-client connect to their own Metro instance instead of defaulting to 8081. (#48098 by @​alanjhughes)
  • Fix async imports (import(...)) via asyncRequireModule not a thenable instead of a full promise shape (#48550 by @​kitten)
  • Fix window.location being called regardless of @expo/metro-runtime being present on native when an async chunk loads after Metro disconnects (#48944 by @​expo-bot)
  • Fix DOM components dropping prop updates that are emitted while the WebView is still loading. (#48813 by @​expo-bot)
  • Fix import.meta.url being null on web when transform.inlineRequires is enabled. (#49045 by @​expo-bot)
  • Fix platform resolution of the expo/dom and expo/dom/internal subpath exports (#49056 by @​hassankhan)
  • [iOS] Remove a duplicated ExpoModulesCore-Swift.h import block in ExpoReactNativeFactory.mm whose #else branch imported the header unconditionally, breaking builds where neither form is on the header search path. (#47729 by @​gabrieldonadel)

💡 Others

  • Re-export useReleasingSharedObjectWithLifecycle from expo-modules-core. (#48819 by @​intergalacticspacehighway)
  • [Android] ExpoReactHostFactory now passes host handlers' DevSupportManagerFactory to ReactHostImpl. (#47637 by @​alanjhughes)
  • [macOS] Fix build by guarding the bundleConfiguration override, which requires react-native 0.84+. (#48494 by @​intergalacticspacehighway)
  • Restore RCTHostRuntimeDelegate conformance for react-native-macos (#46420 by @​gabrieldonadel)
  • Add explicit react-native/Libraries/Core/InitializeCore import to native runtime entrypoint (#46344 by @​kitten)
  • [Internal] Update logbox imports (#46640 by @​kitten)
  • Re-export more expo-modules-core APIs (#45987 by @​Wenszel)
  • Update URL and URLSearchParams implementation to support IDNA/TR-46 and improve performance. Spec-adherence has increased and few gaps should now be noticeable compared to browsers (#47813 by @​kitten)
  • [Internal] Add getBundleOrigin, exposed as expo/internal/bundle-origin (#48275 by @​kitten)
  • [Internal] Derive getDevServer from the bundle URL internally and expose getBundleUrl helper (#48278 by @​kitten)
  • Rewrite the TextDecoder implementation to increase decoding performance (#48877 by @​kitten)
  • Bump to @expo/metro@56.0.2 and metro@0.84.5 (#49161 by @​kitten)

57.0.9 - 2026-07-29

This version does not introduce any user-facing changes.

57.0.8 - 2026-07-22

... (truncated)

Commits

Updates globals from 17.5.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

  • Update globals (2026-09-01) (#353) 50a2119
  • Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

v17.6.0

  • Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

Commits

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.14 to 19.2.18

Commits

Updates type-fest from 5.6.0 to 5.9.0

Release notes

Sourced from type-fest's releases.

v5.9.0

New types

Improvements

  • SharedUnionFieldsDeep: Ensure it doesn&#39;t distribute processed union over mapped type (#1509) 07a04de
  • TypedArray: Add Float16Array (#1495) ca27cce

Fixes

  • Writable: Fix behavior with index signatures (#1470) 48ddc4b
  • Jsonify: Fix optional properties leaking undefined into the key set (#1484) 5339fb3
  • IsLiteral*: Fix behavior with unions (#1482) 3425142

sindresorhus/type-fest@v5.8.0...v5.9.0

v5.8.0

New types

Improvements

  • StringRepeat: Add support for generating really long strings (#1447) 1b7eed6

Fixes

  • LastArrayElement: Fix handling of tuples with optional elements (#1461) 8e5c69a
  • Schema: Fix incorrect handling of any and unknown fields (#1459) 82ccfc3
  • StringRepeat: Fix behavior with extremely large/small counts (#1455) 441ac27

sindresorhus/type-fest@v5.7.0...v5.8.0

v5.7.0

New types

Improvements

... (truncated)

Commits

Updates typescript-eslint from 8.59.0 to 8.69.0

Release notes

Sourced from typescript-eslint's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • website: respect allowJs playground config (#12744)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

  • Evy...

    Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group across 2 directories with…
4e866a7 
… 16 updates

Bumps the minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.5` | `2.1.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` |
| [@sentry/react-native](https://github.com/getsentry/sentry-react-native) | `8.15.1` | `8.24.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.12.2` | `24.13.3` |
| [babel-preset-expo](https://github.com/expo/expo/tree/HEAD/packages/babel-preset-expo) | `56.0.15` | `56.0.20` |
| [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `56.0.12` | `56.0.21` |
| [globals](https://github.com/sindresorhus/globals) | `17.5.0` | `17.12.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.18` |
| [type-fest](https://github.com/sindresorhus/type-fest) | `5.6.0` | `5.9.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.0` | `8.69.0` |

Bumps the minor-and-patch group with 3 updates in the /backend directory: [@sentry/core](https://github.com/getsentry/sentry-javascript), [@sentry/node-core](https://github.com/getsentry/sentry-javascript) and [@sentry/bundler-plugins](https://github.com/getsentry/sentry-javascript).


Updates `@eslint/compat` from 2.0.5 to 2.1.0
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.0/packages/compat)

Updates `@eslint/js` from 9.39.4 to 9.39.5
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js)

Updates `@sentry/react-native` from 8.15.1 to 8.24.0
- [Release notes](https://github.com/getsentry/sentry-react-native/releases)
- [Changelog](https://github.com/getsentry/sentry-react-native/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-react-native@8.15.1...8.24.0)

Updates `@types/node` from 24.12.2 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `babel-preset-expo` from 56.0.15 to 56.0.20
- [Changelog](https://github.com/expo/expo/blob/main/packages/babel-preset-expo/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/babel-preset-expo)

Updates `expo` from 56.0.12 to 56.0.21
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo)

Updates `globals` from 17.5.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.5.0...v17.12.0)

Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `react` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `type-fest` from 5.6.0 to 5.9.0
- [Release notes](https://github.com/sindresorhus/type-fest/releases)
- [Commits](sindresorhus/type-fest@v5.6.0...v5.9.0)

Updates `typescript-eslint` from 8.59.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/typescript-eslint)

Updates `@sentry/core` from 10.72.0 to 10.73.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.72.0...10.73.0)

Updates `@sentry/node-core` from 10.72.0 to 10.73.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.72.0...10.73.0)

Updates `@sentry/opentelemetry` from 10.72.0 to 10.73.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.72.0...10.73.0)

Updates `@sentry/bundler-plugins` from 10.72.0 to 10.73.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.72.0...10.73.0)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@eslint/js"
  dependency-version: 9.39.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@sentry/react-native"
  dependency-version: 8.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: babel-preset-expo
  dependency-version: 56.0.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: expo
  dependency-version: 56.0.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: type-fest
  dependency-version: 5.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/core"
  dependency-version: 10.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/node-core"
  dependency-version: 10.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/opentelemetry"
  dependency-version: 10.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/bundler-plugins"
  dependency-version: 10.73.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency update (changelog) javascript Pull requests that update javascript code labels Sep 4, 2026
@socket-security

socket-security Bot commented Sep 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​sentry/​node-core@​10.72.0 ⏵ 10.73.064 -1210010096 +1100
Updatedtypescript-eslint@​8.59.0 ⏵ 8.69.010010074 +198100
Added@​types/​react@​19.2.181001007990100
Updated@​sentry/​bundler-plugins@​10.72.0 ⏵ 10.73.0921008395 +1100
Updated@​sentry/​core@​10.72.0 ⏵ 10.73.09510083 +196 +1100
Updatedreact@​19.2.5 ⏵ 19.2.81001008497100
Updatedglobals@​17.5.0 ⏵ 17.12.010010086 +195100
Updated@​eslint/​compat@​2.0.5 ⏵ 2.1.010010010087 -1100
Added@​eslint/​js@​9.39.510010010089100
Updatedprettier@​3.8.3 ⏵ 3.9.69810097 +194100
Added@​sentry/​react-native@​8.24.09910010096100
Updated@​sentry/​opentelemetry@​10.72.0 ⏵ 10.73.09910010096 +1100
Addedbabel-preset-expo@​56.0.2096100100100100
Addedexpo@​56.0.2198100100100100

View full report

@socket-security

socket-security Bot commented Sep 4, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @sentry/node-core is 60.0% likely obfuscated

Confidence: 0.60

Location: Package overview

From: backend/package-lock.json → npm/@sentry/node-core@10.73.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@sentry/node-core@10.73.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency update (changelog) javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants