👷 Update all non-major dependencies by renovate[bot] · Pull Request #4952 · DataDog/browser-sdk

renovate · 2026-08-15T05:40:08Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@angular/common (source)	`22.1.0` → `22.1.1`	devDependencies	patch	`22.1.2`
@angular/compiler (source)	`22.1.0` → `22.1.1`	devDependencies	patch	`22.1.2`
@angular/core (source)	`22.1.0` → `22.1.1`	devDependencies	patch	`22.1.2`
@angular/platform-browser (source)	`22.1.0` → `22.1.1`	devDependencies	patch	`22.1.2`
@angular/router (source)	`22.1.0` → `22.1.1`	devDependencies	patch	`22.1.2`
@datadog/webpack-plugin (source)	`3.2.10` → `3.2.12`	devDependencies	patch
@module-federation/enhanced (source)	`2.8.1` → `2.8.2`	devDependencies	patch
@salesforce/cli (source)	`2.146.3` → `2.147.7`	devDependencies	minor
@tanstack/react-router (source)	`1.170.18` → `1.170.25`	dependencies	patch	`1.170.29` (+3)
@tanstack/react-router (source)	`1.170.18` → `1.170.25`	devDependencies	patch	`1.170.29` (+3)
@types/node (source)	`26.1.2` → `26.2.0`	devDependencies	minor
@typescript-eslint/utils (source)	`8.65.0` → `8.66.0`	devDependencies	minor	`8.67.0`
@vue/compiler-dom (source)	`3.5.40` → `3.5.41`	devDependencies	patch
eslint (source)	`10.8.0` → `10.8.1`	devDependencies	patch
github/codeql-action	`v4.37.4` → `v4.37.6`	action	patch	`v4.37.7`
next (source)	`16.2.12` → `16.3.0`	dependencies	minor	`16.3.1`
next (source)	`16.2.12` → `16.3.0`	devDependencies	minor	`16.3.1`
node (source)	`26.6.0` → `26.7.0`	volta	minor
node (source)	`26.6.0-bookworm-slim` → `26.7.0-bookworm-slim`	stage	minor
nuxt (source)	`4.5.1` → `4.5.2`	dependencies	patch
puppeteer (source)	`25.4.0` → `25.5.0`	devDependencies	minor	`25.8.0` (+2)
rolldown (source)	`1.2.1` → `1.2.3`	resolutions	patch	`1.2.4`
typescript-eslint (source)	`8.65.0` → `8.66.0`	devDependencies	minor	`8.67.0`
undici (source)	`8.9.0` → `8.10.0`	devDependencies	minor
vite (source)	`8.2.0` → `8.2.1`	devDependencies	patch
vue (source)	`3.5.40` → `3.5.41`	dependencies	patch
vue (source)	`3.5.40` → `3.5.41`	devDependencies	patch
ws	`8.21.1` → `8.21.3`	devDependencies	patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

angular/angular (@angular/common)

`v22.1.1`

Compare Source

core

Commit	Type	Description
aa6d3189c1	fix	initialize hydration triggers after late runtime activation
deecb301c8	fix	warn when style property bindings receive invalid values

http

Commit	Type	Description
ac3728e79f	fix	avoid aborting completed requests in FetchBackend
688a0a7118	fix	respect content-type charset in fetch backend text decoder
a13b968451	fix	run root interceptors in the terminal request chain
32af9b525e	fix	strip RFC 6265 DQUOTE characters and handle URIError in parseCookieValue

DataDog/build-plugins (@datadog/webpack-plugin)

`v3.2.12`

Compare Source

What's Changed

[dop] [error-tracking]: derive debug_id from file content by @jhssilva in #470
[bot] Bump versions to v3.2.11 by @dd-octo-sts[bot] in #477

New Contributors

@jhssilva made their first contribution in #470

Full Changelog: DataDog/build-plugins@v3.2.11...v3.2.12

`v3.2.11`

Compare Source

What's Changed

[bot] Bump versions to v3.2.10 by @dd-octo-sts[bot] in #475

Full Changelog: DataDog/build-plugins@v3.2.10...v3.2.11

module-federation/core (@module-federation/enhanced)

`v2.8.2`

Compare Source

Patch Changes

@module-federation/dts-plugin@2.8.2
@module-federation/runtime-tools@2.8.2
@module-federation/webpack-bundler-runtime@2.8.2
@module-federation/rspack@2.8.2
@module-federation/inject-external-runtime-core-plugin@2.8.2
@module-federation/sdk@2.8.2
@module-federation/managers@2.8.2
@module-federation/manifest@2.8.2
@module-federation/bridge-react-webpack-plugin@2.8.2
@module-federation/error-codes@2.8.2
@module-federation/cli@2.8.2

salesforcecli/cli (@salesforce/cli)

`v2.147.7`

Compare Source

!! Release as nightly !!

`v2.147.6`

Compare Source

!! Release as nightly !!

`v2.147.5`

Compare Source

!! Release as nightly !!

`v2.147.4`

Compare Source

!! Release as nightly !!

`v2.147.3`

Compare Source

!! Release as nightly !!

`v2.147.2`

Compare Source

!! Release as nightly !!

`v2.147.1`

Compare Source

!! Release as nightly !!

`v2.147.0`

Compare Source

!! Release as nightly !!

TanStack/router (@tanstack/react-router)

`v1.170.25`

Compare Source

Patch Changes

Updated dependencies [51138a8]:
- @tanstack/router-core@1.171.21

Patch Changes

#7952 95dec51 - bail out of Link re-renders when the resolved href and active state are unchanged

`v1.170.22`

Compare Source

Patch Changes

#7992 ea3a665 - retain mounted UI during revalidation
Updated dependencies [ea3a665]:
- @tanstack/router-core@1.171.19

`v1.170.21`

Compare Source

Patch Changes

#7961 697ebb6 - Prevent a blank frame before zero-delay initial pending UI by using a
component-scoped React transition for match publication. Pending timing,
boundary selection, and rendered matches continue to come from the router
core.
#7970 2435885 - createFileRoute does not rely on FileRoute class
#7971 86bf510 - clean intersection observer options in link component
#7967 6aefb33 - Preserve path params in their raw string form while matching routes so structured values returned by params.parse produce stable match IDs and do not reuse stale loader data.

RouterCore.getMatchedRoutes() now returns [matchedRoutes, rawParams, foundRoute] instead of an object.
Updated dependencies [84db4a8, 9cac62a, 6aefb33]:
- @tanstack/router-core@1.171.18
- @tanstack/history@1.162.1

`v1.170.20`

Compare Source

Patch Changes

Updated dependencies [b2908c6]:
- @tanstack/router-core@1.171.17

`v1.170.19`

Compare Source

Patch Changes

#7805 45c4ad8 - Rewrite match loading around a lane-based scheduler that tracks each navigation, preload, and background reload as an ordered unit of work. This fixes pending/redirect/retry state leaking between overlapping navigations, restores correct SSR status codes for redirects, errors, and not-found responses, and closes hydration gaps where the client re-ran work the server had already completed.
- Invalidation now retires matching active preloads so older speculative loader results cannot become fresh cache data after invalidation.
- Route headers() now only runs on the server, matching the documented behavior — it is no longer invoked during client-side asset projection.
- The documented default gcTime and preloadGcTime now match the existing runtime default of 5 minutes (300_000).
Removed / changed exported internals
- RouterState no longer includes loadedAt, isTransitioning, statusCode, or redirect. Use match.updatedAt in place of loadedAt; subscribe to router.state.status / router.state.isLoading in place of isTransitioning; server response status and redirect handling are now internal to the server loader and are no longer exposed on router.state.
- RouteMatch.fetchCount has been removed, with no replacement — it was purely informational.
- RouteMatch.status no longer includes 'redirected' (it remains 'pending' | 'success' | 'error' | 'notFound') — redirected matches are dropped from the match list instead of being rendered.
- RouteMatch.globalNotFound has been renamed and privatized to the internal _notFound field. Use match.status === 'notFound' instead.
- The exported React, Solid, and Vue Match components now accept routeId instead of matchId.
- The exported RouterStores adapter contract now uses route-keyed presentation stores: matchesId is replaced by ids, matchStores by byRoute, and getRouteMatchStore() by getMatchStore(). The separate loadedAt, isLoading, isTransitioning, statusCode, and redirect stores have been removed, along with the pending/cache stores and their setters. StoreConfig.init has also been removed. Read application-facing state from router.state; preload and cache coordination are now internal.
- Removed RouterCore members getMatch(), updateMatch(), cancelMatch(), and cancelMatches() — read matches from router.state.matches (e.g. router.state.matches.find((m) => m.id === id)); there is no replacement for mutating or cancelling an individual in-flight match from outside the router.
- Removed RouterCore.hasNotFoundMatch() — use router.state.matches.some((m) => m.status === 'notFound').
- Removed RouterCore.looseRoutesById — use routesById.
- Removed RouterCore.isPrerendering(), RouterCore.isViewTransitionTypesSupported, and RouterCore.viewTransitionPromise, with no replacement.
- Removed RouterCore.getParsedLocationHref() and RouterCore.clearExpiredCache(), with no replacement — expired cache entries are now reconciled automatically as part of match commit.
- Removed RouterCore.latestLoadPromise and RouterCore.beforeLoad(), with no replacement.
- RouterCore.commitLocationPromise and RouterCore.pendingBuiltLocation have been replaced by the internal _commitPromise and _pendingLocation fields.
- Removed the exported GetMatchFn and UpdateMatchFn types, along with the methods they typed.
- Removed the standalone getMatchedRoutes() export from @tanstack/router-core — use the router.getMatchedRoutes() instance method instead.
- RouterCore.loadRouteChunk() no longer accepts an array of component types as its second argument. One-argument usage is unchanged; the optional second argument is now 'errorComponent', 'notFoundComponent', or false for internal boundary loading.
- Removed Redirect.redirectHandled, which was internal redirect bookkeeping.
- MatchRoutesOpts.preload and MatchRoutesOpts.dest have been removed.
- StartTransitionFn is now (fn, expected) => Promise<boolean> (previously (fn) => void). This only affects custom framework adapters that implement startTransition.
Updated dependencies [45c4ad8]:
- @tanstack/router-core@1.171.16

typescript-eslint/typescript-eslint (@typescript-eslint/utils)

`v8.66.0`

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vuejs/core (@vue/compiler-dom)

`v3.5.41`

Compare Source

Bug Fixes

compiler-core: preserve vnode lifecycle in stable v-for (#11682) (02421cd), closes #9239 #12569
compiler-sfc: handle transformed template AST after cache invalidation (#15136) (a4440c0), closes #15126 #15128
custom-element: preserve nested async mount order (#15154) (71f9ff5), closes #15153
custom-element: warn when props override native properties (#12125) (22b53ea), closes #12124
runtime-core: avoid re-fetching resource props with unchanged values (#15105) (a7513a1)
runtime-core: restore SSR setup state when handling async setup result (#15114) (b6191cb), closes #15113
scheduler: avoid stack overflow when flushing very large post cb arrays (#15143) (c04a45d), closes #15142
slots: handle nullish v-bind slot props (#15177) (2506700)
ssr: normalize hidden states during hydration (#13125) (4e467d7)
transition: support transition to teleport component child (#11959) (77061fe), closes #11910
types: preserve defineModel inference with factory defaults (#15097) (0516c43), closes #15096
v-model: preserve text input before hydration (#14411) (2468464), closes #14403

eslint/eslint (eslint)

`v10.8.1`

Compare Source

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)
0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
678c90b docs: Update README (GitHub Actions Bot)
8a10424 docs: Update README (GitHub Actions Bot)
69bb948 docs: Update README (GitHub Actions Bot)

Chores

0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
d086293 test: add error locations to no-undef (#21147) (JIYEON)
cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
7c1e175 test: add error locations to require-await (#21145) (Grit)
588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

github/codeql-action (github/codeql-action)

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

`v4.37.5`

Compare Source

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

vercel/next.js (next)

`v16.3.0`

Compare Source

nodejs/node (node)

`v26.7.0`: 2026-08-05, Version 26.7.0 (Current), @aduh95

Compare Source

Notable Changes

[58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
[44b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
[c1e4f7365e] - (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu) #64565
[11c2f9c642] - (SEMVER-MINOR) module: implement Symbol.dispose in ModuleHooks (Remco Haszing) #63928
[a646319f61] - (SEMVER-MINOR) test_runner: add support for --test-coverage-include-all (avivkeller) #64830

Commits

[a2d3f891d3] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731
[d7266cdd99] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146
[2e64293e3f] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #64739
[5fda0958bd] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #63904
[5298db40f9] - build: run perfetto build and test on GHA (Chengzhong Wu) #64721
[e3eac7cef9] - build: fix v8_use_perfetto source scraping (Chengzhong Wu) #64721
[ab5f076d7f] - build: bump rustc requirement to >=1.86 (Renegade334) #64543
[df608e061f] - (SEMVER-MINOR) build: perfetto-sdk (Chengzhong Wu) #64565
[74928adc46] - build,tools: fix shared library cross-compile (Kirill Saied) #63963
[58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
[58d13b6f3d] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #64776
[478a719cb5] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #64776
[44b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
[fde85237c7] - crypto: clarify missing cipher error (Filip Skokan) #64852
[c604d8846d] - crypto: reuse X509 issuer result (Filip Skokan) #64852
[c68c7d0112] - crypto: validate key generation options (Filip Skokan) #64852
[c36bb1d017] - crypto: fix Argon2 validation errors (Filip Skokan) #64852
[f61408bb27] - crypto: handle XOF output allocation failure (Filip Skokan) #64851
[2b4053d046] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851
[4b7b2adf44] - crypto: handle DH operation failures (Filip Skokan) #64851
[12170c3753] - crypto: use user-facing error for output encoding changes (Archkon) #64692
[474f06d550] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #64467
[718cbe9497] - deps: upgrade npm to 11.19.0 (npm team) #64883
[657c6154b3] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944
[75a1fbeff9] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #64943
[07d7cb7cd8] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #64945
[f7d56359f1] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #64942
[8b06457cfb] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #64941
[5919d01525] - deps: update googletest to 1b6f64d (Node.js GitHub Bot) #64940
[4a87ad6cff] - deps: update nghttp2 to 1.70.

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

datadog-prod-us1-4 · 2026-08-15T05:40:32Z

✨ Unblock PR with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

DataDog/browser-sdk | check-node-version

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 77.24% (+0.00%)

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 94c1ff7 | Docs | Datadog PR Page | Give us feedback!}

cit-pr-commenter-54b7da · 2026-08-16T09:17:29Z

Bundles Sizes Evolution

📦 Bundle Name	Base Size	Local Size	𝚫	𝚫%	Status
Rum	180.54 KiB	180.54 KiB	0 B	0.00%	✅
Rum Profiler	8.43 KiB	8.43 KiB	0 B	0.00%	✅
Rum Recorder	21.12 KiB	21.12 KiB	0 B	0.00%	✅
Logs	57.04 KiB	57.04 KiB	0 B	0.00%	✅
Rum Salesforce	N/A	138.49 KiB	N/A	N/A	N/A
Rum Slim	138.49 KiB	138.49 KiB	0 B	0.00%	✅
Worker	22.96 KiB	22.96 KiB	0 B	0.00%	✅
Rum Shopify	N/A	200.26 KiB	N/A	N/A	N/A
Rum-shopify Profiler	N/A	8.43 KiB	N/A	N/A	N/A
Rum-shopify Recorder	N/A	3.72 KiB	N/A	N/A	N/A

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 15, 2026

renovate Bot requested a review from a team as a code owner August 15, 2026 05:40

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 15, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from b781e94 to 137d2f5 Compare August 16, 2026 09:15

👷 Update all non-major dependencies

94c1ff7

renovate Bot force-pushed the renovate/all-minor-patch branch from 137d2f5 to 94c1ff7 Compare August 16, 2026 21:43

Navigation Menu

Uh oh!

👷 Update all non-major dependencies - #4952

👷 Update all non-major dependencies#4952
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Aug 15, 2026 •

edited

Loading

Uh oh!

datadog-prod-us1-4 Bot commented Aug 15, 2026 •

edited by datadog-prod-us1-6 Bot

Loading

Uh oh!

cit-pr-commenter-54b7da Bot commented Aug 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

core

http

What's Changed

New Contributors

What's Changed

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Bug Fixes

Bug Fixes

Documentation

Chores

v26.7.0: 2026-08-05, Version 26.7.0 (Current), @​aduh95

Notable Changes

Commits

Configuration

Uh oh!

datadog-prod-us1-4 Bot commented Aug 15, 2026 • edited by datadog-prod-us1-6 Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Warnings

ℹ️ Info

Uh oh!

cit-pr-commenter-54b7da Bot commented Aug 16, 2026

Bundles Sizes Evolution

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 15, 2026 •

edited

Loading

`v26.7.0`: 2026-08-05, Version 26.7.0 (Current), @aduh95

datadog-prod-us1-4 Bot commented Aug 15, 2026 •

edited by datadog-prod-us1-6 Bot

Loading