Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@apollo/client (source)	4.0.11 → 4.0.12
@sentry/react (source)	10.32.1 → 10.33.0
@types/node (source)	24.10.4 → 24.10.7
@types/react (source)	19.2.7 → 19.2.8
firebase-functions	7.0.2 → 7.0.3
sass	1.97.1 → 1.97.2

---

Release Notes

apollographql/apollo-client (@​apollo/client)

v4.0.12

Compare Source

Patch Changes

• #​12884 d329790 Thanks @​phryneas! - Ensure that PreloadedQueryRef instances are unsubscribed when garbage collected

• #​13069 9cad04a Thanks @​jerelmiller! - Truncate @​stream arrays only on last chunk by default

getsentry/sentry-javascript (@​sentry/react)

v10.33.0

Compare Source

Important Changes

• feat(core): Apply scope attributes to metrics (#​18738)

  You can now set attributes on the SDK's scopes which will be applied to all metrics as long as the respective scopes are active. For the time being, only string, number and boolean attribute values are supported.

  Sentry.getGlobalScope().setAttributes({ is_admin: true, auth_provider: 'google' });
  
  Sentry.withScope(scope => {
    scope.setAttribute('step', 'authentication');
  
    // scope attributes `is_admin`, `auth_provider` and `step` are added
    Sentry.metrics.count('clicks', 1, { attributes: { activeSince: 100 } });
    Sentry.metrics.gauge('timeSinceRefresh', 4, { unit: 'hour' });
  });
  
  // scope attributes `is_admin` and `auth_provider` are added
  Sentry.metrics.count('response_time', 283.33, { unit: 'millisecond' });

• feat(tracing): Add Vercel AI SDK v6 support (#​18741)

  The Sentry SDK now supports the Vercel AI SDK v6. Tracing and error monitoring will work automatically with the new version.

• feat(wasm): Add applicationKey option for third-party error filtering (#​18762)

  Adds support for applying an application key to WASM stack frames that can be then used in the thirdPartyErrorFilterIntegration for detection of first-party code.

  Usage:

  Sentry.init({
    integrations: [
      // Integration order matters: wasmIntegration needs to be before thirdPartyErrorFilterIntegration
      wasmIntegration({ applicationKey: 'your-custom-application-key' }), ←───┐
      thirdPartyErrorFilterIntegration({                                      │
        behaviour: 'drop-error-if-exclusively-contains-third-party-frames',   ├─ matching keys
        filterKeys: ['your-custom-application-key'] ←─────────────────────────┘
      }),
    ],
  });

Other Changes

• feat(cloudflare): Support propagateTraceparent (#​18569)
• feat(core): Add ignoreSentryInternalFrames option to thirdPartyErrorFilterIntegration (#​18632)
• feat(core): Add gen_ai.conversation.id attribute to OpenAI and LangGr… (#​18703)
• feat(core): Add recordInputs/recordOutputs options to MCP server wrapper (#​18600)
• feat(core): Support IPv6 hosts in the DSN (#​2996) (#​17708)
• feat(deps): Bump bundler plugins to ^4.6.1 (#​17980)
• feat(nextjs): Emit warning for conflicting treeshaking / debug settings (#​18638)
• feat(nextjs): Print Turbopack note for deprecated webpack options (#​18769)
• feat(node-core): Add isolateTrace option to node-cron instrumentation (#​18416)
• feat(node): Use process.on('SIGTERM') for flushing in Vercel functions (#​17583)
• feat(nuxt): Detect development environment and add dev E2E test (#​18671)
• fix(browser): Forward worker metadata for third-party error filtering (#​18756)
• fix(browser): Reduce number of visibilitystate and pagehide listeners (#​18581)
• fix(browser): Respect tunnel in diagnoseSdkConnectivity (#​18616)
• fix(cloudflare): Consume body of fetch in the Cloudflare transport (#​18545)
• fix(core): Set op on ended Vercel AI spans (#​18601)
• fix(core): Subtract performance.now() from browserPerformanceTimeOrigin fallback (#​18715)
• fix(core): Update client options to allow explicit undefined (#​18024)
• fix(feedback): Fix cases where the outline of inputs were wrong (#​18647)
• fix(next): Ensure inline sourcemaps are generated for wrapped modules in Dev (#​18640)
• fix(next): Wrap all Random APIs with a safe runner (#​18700)
• fix(nextjs): Avoid Edge build warning from OpenTelemetry process.argv0 (#​18759)
• fix(nextjs): Remove polynomial regular expression (#​18725)
• fix(node-core): Ignore worker threads in OnUncaughtException (#​18689)
• fix(node): relax Fastify's setupFastifyErrorHandler argument type (#​18620)
• fix(nuxt): Allow overwriting server-side defaultIntegrations (#​18717)
• fix(pino): Allow custom namespaces for msg and err (#​18597)
• fix(react,solid,vue): Fix parametrization behavior for non-matched routes (#​18735)
• fix(replay): Ensure replays contain canvas rendering when resumed after inactivity (#​18714)
• fix(tracing): add gen_ai.request.messages.original_length attributes (#​18608)
• ref(nextjs): Drop resolve dependency (#​18618)
• ref(react-router): Use snake_case for span op names (#​18617)

Internal Changes

• chore(bun): Fix install-bun.js version check and improve upgrade feedback (#​18492)
• chore(changelog): Fix typo (#​18648)
• chore(craft): Use version templating for aws layer (#​18675)
• chore(deps): Bump IITM to ^2.0.1 (#​18599)
• chore(e2e-tests): Upgrade @trpc/server and @trpc/client (#​18722)
• chore(e2e): Unpin react-router-7-framework-spa to ^7.11.0 (#​18551)
• chore(nextjs): Bump next version in dev deps (#​18661)
• chore(node-tests): Upgrade @langchain/core (#​18720)
• chore(react): Inline hoist-non-react-statics package (#​18102)
• chore(size-limit): Add size checks for metrics and logs (#​18573)
• chore(tests): Add unordered mode to cloudflare test runner (#​18596)
• ci(deps): bump actions/cache from 4 to 5 (#​18654)
• ci(deps): Bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#​18656)
• ci(deps): bump actions/upload-artifact from 5 to 6 (#​18655)
• ci(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (#​18657)
• doc: E2E testing documentation updates (#​18649)
• ref(core): Extract and reuse getCombinedScopeData helper (#​18585)
• ref(core): Remove dependence between performance.timeOrigin and performance.timing.navigationStart (#​18710)
• ref(core): Streamline and test browserPerformanceTimeOrigin (#​18708)
• ref(core): Strengthen browserPerformanceTimeOrigin reliability check (#​18719)
• ref(core): Use serializeAttributes for metric attribute serialization (#​18582)
• ref(node): Remove duplicate function isCjs (#​18662)
• test(core): Improve unit test performance for offline transport tests (#​18628)
• test(core): Use fake timers in promisebuffer tests to ensure deterministic behavior (#​18659)
• test(e2e): Add e2e metrics tests in Next.js 16 (#​18643)
• test(e2e): Pin agents package in cloudflare-mcp test (#​18609)
• test(e2e): Pin solid/vue tanstack router to 1.41.8 (#​18610)
• test(nestjs): Add canary test for latest (#​18685)
• test(node-native): Increase worker block timeout (#​18683)
• test(nuxt): Fix nuxt-4 dev E2E test (#​18737)
• test(tanstackstart-react): Add canary test for latest (#​18686)
• test(vue): Added canary and latest test variants to Vue tests (#​18681)

Work in this release was contributed by @​G-Rath, @​gianpaj, @​maximepvrt, @​Mohataseem89, @​sebws, and @​xgedev. Thank you for your contributions!

firebase/firebase-functions (firebase-functions)

v7.0.3

Compare Source

• Internal improvements.

sass/dart-sass (sass)

v1.97.2

Compare Source

• Additional fixes for implicit configuration when nested imports are involved.

---

Configuration

📅 Schedule: Branch creation - "before 6:00am on Monday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.