Skip to content

Update all non-major frontend dependencies#1663

Merged
KOliver94 merged 2 commits into
mainfrom
renovate/all-minor-patch-frontend
May 10, 2026
Merged

Update all non-major frontend dependencies#1663
KOliver94 merged 2 commits into
mainfrom
renovate/all-minor-patch-frontend

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 9, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@marsidev/react-turnstile 1.5.11.5.2 age adoption passing confidence
@mui/icons-material (source) 7.3.107.3.11 age adoption passing confidence
@mui/material (source) 7.3.107.3.11 age adoption passing confidence
@mui/x-date-pickers (source) 8.28.48.28.5 age adoption passing confidence
@sentry/react (source) 10.51.010.52.0 age adoption passing confidence
@typescript-eslint/parser (source) 8.59.18.59.2 age adoption passing confidence
react (source) 19.2.519.2.6 age adoption passing confidence
react-dom (source) 19.2.519.2.6 age adoption passing confidence
react-router (source) 7.14.27.15.0 age adoption passing confidence
typescript-eslint (source) 8.59.18.59.2 age adoption passing confidence
vite (source) 7.3.27.3.3 age adoption passing confidence
vite-plugin-pwa 1.2.01.3.0 age adoption passing confidence

Release Notes

marsidev/react-turnstile (@​marsidev/react-turnstile)

v1.5.2

Compare Source

No significant changes

    View changes on GitHub
mui/material-ui (@​mui/icons-material)

v7.3.11

Compare Source

A big thanks to the 5 contributors who made this release possible.

@mui/material@7.3.11
Docs
Core

All contributors of this release in alphabetical order: @​alexfauquette, @​mj12albert, @​oliviertassinari, @​silviuaavram, @​siriwatknp

mui/mui-x (@​mui/x-date-pickers)

v8.28.5

Compare Source

We'd like to extend a big thank you to the 2 contributors who made this release possible. Here are some highlights ✨:

  • 🐞 Bugfixes

The following team members contributed to this release:
@​LukasTy, @​MBilalShafi

Data Grid
@mui/x-data-grid@8.28.5
@mui/x-data-grid-pro@8.28.5 pro

Same changes as in @mui/x-data-grid@8.28.5.

@mui/x-data-grid-premium@8.28.5 premium

Same changes as in @mui/x-data-grid-pro@8.28.5.

Date and Time Pickers
@mui/x-date-pickers@8.28.5
@mui/x-date-pickers-pro@8.28.5 pro

Same changes as in @mui/x-date-pickers@8.28.5.

Tree View
@mui/x-tree-view@8.28.5
@mui/x-tree-view-pro@8.28.5 pro

Same changes as in @mui/x-tree-view@8.28.5.

Core
getsentry/sentry-javascript (@​sentry/react)

v10.52.0

Compare Source

Important Changes
  • Beta release of the official Hono Sentry SDK

    This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the
    Sentry Hono SDK docs. Please reach out on
    GitHub if you have any feedback or concerns.

  • feat(browser): Add ingest_settings to v2 log envelope payload (#​20453)

    Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes
  • docs(hono): Add new docs link and move to BETA release (#​20666)
  • feat(browser): Add ingest_settings to v2 metrics envelope payload (#​20454)
  • feat(browser): Migrate spotlight event processor to ignoreSpans (#​20595)
  • feat(cloudflare): Capture request body via httpServerIntegration (#​20614)
  • feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#​20523)
  • feat(cloudflare): Support tracing for queue producer (#​20529)
  • feat(core): Apply request data to segment spans in span streaming (#​20654)
  • feat(core): Migrate Vercel AI event processor to span streaming (#​20608)
  • feat(deno): Add processSegmentSpan to Deno context integration (#​20613)
  • feat(http): Portable node:http client instrumentation (#​20393)
  • feat(nitro): Add unstorage tracing channel instrumentation (#​20615)
  • feat(node-core): Add processSegmentSpan to node context integration (#​20678)
  • feat(node): Use diagnostics_channel for redis >= 5.12.0 (#​20573)
  • feat(node): Vendor ioredis, redis instrumentations (#​20510)
  • feat(replay): Reset replay id from DSC on session expiry/refresh (#​20129)
  • fix: Bump fast-xml-parser to fix vulnerability (#​20644)
  • fix: Bump vite versions to fix vulnerability (#​20646)
  • fix(core): Drain buffers in flush() when there is no transport (#​20207)
  • fix(core): Guard against undefined chained in copyProps (#​20637)
  • fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#​20636)
  • fix(deps): Bump transitive deps for medium security fixes (#​20683)
  • fix(hono): Do not capture 3xx and 4xx errors and add tests (#​20640)
  • fix(nextjs): Skip build modification when SRI is enabled (#​20694)
  • fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#​20509)
Internal Changes
  • chore: Remove bundle-analyzer-scenarios dev packages (#​20680)
  • chore(deps): Bump @​hono/node-server from 1.19.10 to 1.19.13 (#​20117)
  • chore(deps): Bump @​nestjs packages to fix path-to-regexp ReDoS (#​20642)
  • chore(deps): Bump axios from 1.15.0 to 1.15.2 (#​20665)
  • chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#​20695)
  • chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#​20696)
  • chore(deps): Bump vulnerable testem version (#​20634)
  • ci(deps): Bump actions/checkout from 4 to 6 (#​20620)
  • ci(deps): Bump actions/create-github-app-token from 2 to 3 (#​20079)
  • ci(deps): Bump denoland/setup-deno from 2.0.3 to 2.0.4 (#​20080)
  • ci(deps): Bump getsentry/craft from 2.24.1 to 2.26.2 (#​20621)
  • feat(deps): Bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#​20457)
  • feat(deps): Bump follow-redirects from 1.15.11 to 1.16.0 (#​20267)
  • feat(deps): Bump hono from 4.12.12 to 4.12.14 (#​20340)
  • fix(tests): Use stable instrumentations api in rr tests (#​20690)
  • ref(tests): Rename streamed http.client span test folders (#​20602)
  • test(browser): Fix browserTracingIntegration unit test (#​20604)
  • test(browser): Fix flaky browser integration test for profiles (#​20587)
  • test(browser): Fix flaky loader test (#​20596)
  • test(browser): Fix flaky loader test (#​20655)
  • test(browser): Make browser profiling test less flaky (#​20664)
  • test(cloudflare): Add e2e test for MCPAgent with DurableObject instrumentation (#​20601)
  • test(cloudflare): Add integration tests for scheduled, D1, and workflow (#​20609)
  • test(cloudflare): Reduce flakiness for cloudflare with sub workers (#​20632)
  • test(cloudflare): Use Node v24 for Cloudflare e2e tests (#​20628)
  • test(deps): Bump Next.js in E2E test apps to fix Server Components DoS (#​20633)
  • test(e2e): Add node-express-streaming E2E test app (#​20684)
  • test(e2e): Add span streaming test app for Cloudflare Workers (#​20681)
  • test(e2e): Add span streaming test app for next 16 (#​20648)
  • test(e2e): Add span streaming test app for React Router 7 SPA (#​20677)
  • test(e2e): Remove remaining npmrc pointing to Verdaccio (#​20611)
  • test(nextjs): Fix flaky node runtime metrics E2E tests (#​20624)
  • test(node): Fix ANR test for flakiness (#​20656)
  • test(node): Fix flaky node cron test (#​20661)
  • test(node): Unflake mongodb test (#​20662)
  • test(react-router): Fix flaky E2E tests (#​20630)
  • test(test-utils): Add MemoryProfiler for heap snapshot testing via CDP (#​20555)

Work in this release was contributed by @​sbs44. Thank you for your contribution!

Bundle size 📦
Path Size
@​sentry/browser 25.68 KB
@​sentry/browser - with treeshaking flags 24.2 KB
@​sentry/browser (incl. Tracing) 43.13 KB
@​sentry/browser (incl. Tracing + Span Streaming) 45.3 KB
@​sentry/browser (incl. Tracing, Profiling) 47.99 KB
@​sentry/browser (incl. Tracing, Replay) 81.67 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 71.37 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 86.25 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 98.57 KB
@​sentry/browser (incl. Feedback) 42.42 KB
@​sentry/browser (incl. sendFeedback) 30.38 KB
@​sentry/browser (incl. FeedbackAsync) 35.35 KB
@​sentry/browser (incl. Metrics) 26.95 KB
@​sentry/browser (incl. Logs) 27.08 KB
@​sentry/browser (incl. Metrics & Logs) 27.76 KB
@​sentry/react 27.38 KB
@​sentry/react (incl. Tracing) 45.31 KB
@​sentry/vue 30.45 KB
@​sentry/vue (incl. Tracing) 44.94 KB
@​sentry/svelte 25.7 KB
CDN Bundle 28.23 KB
CDN Bundle (incl. Tracing) 45.83 KB
CDN Bundle (incl. Logs, Metrics) 29.62 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 46.91 KB
CDN Bundle (incl. Replay, Logs, Metrics) 67.84 KB
CDN Bundle (incl. Tracing, Replay) 82.15 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 83.2 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 87.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 88.89 KB
CDN Bundle - uncompressed 82.89 KB
CDN Bundle (incl. Tracing) - uncompressed 137.15 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 86.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 140.53 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 208.3 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 252.48 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 255.85 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 265.86 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 269.22 KB
@​sentry/nextjs (client) 47.75 KB
@​sentry/sveltekit (client) 43.6 KB
@​sentry/node-core 59.05 KB
@​sentry/node 161.63 KB
@​sentry/node - without tracing 71.76 KB
@​sentry/aws-serverless 105.11 KB
@​sentry/cloudflare (withSentry) - minified 165.38 KB
@​sentry/cloudflare (withSentry) 417.48 KB
typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.59.2

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

facebook/react (react)

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

remix-run/react-router (react-router)

v7.15.0

Compare Source

Minor Changes
  • Stabilize unstable_defaultShouldRevalidate as defaultShouldRevalidate on <Link>, <Form>, useLinkClickHandler, useSubmit, fetcher.submit, and setSearchParams (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize the instrumentation APIs. unstable_instrumentations is now instrumentations and unstable_pattern is now pattern (a993f09)

    • The unstable_ServerInstrumentation, unstable_ClientInstrumentation, unstable_InstrumentRequestHandlerFunction, unstable_InstrumentRouterFunction, unstable_InstrumentRouteFunction, and unstable_InstrumentationHandlerResult types have had their unstable_ prefixes removed
    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize unstable_mask as mask on <Link>, useLinkClickHandler, and useNavigate, and rename the corresponding Location.unstable_mask field to Location.mask (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize the unstable_normalizePath option on staticHandler.query and staticHandler.queryRoute as normalizePath (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize future.unstable_passThroughRequests as future.v8_passThroughRequests (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Remove unstable_subResourceIntegrity from the runtime FutureConfig type; the flag is now controlled by the top-level subResourceIntegrity option in react-router.config.ts (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize unstable_url as url on loader, action, and middleware function args (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
  • Stabilize unstable_useTransitions as useTransitions on <BrowserRouter>, <HashRouter>, <HistoryRouter>, <MemoryRouter>, <Router>, <RouterProvider>, <HydratedRouter>, and useLinkClickHandler (a993f09)

    • ⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly
Patch Changes
  • Add nonce to <Scripts> <link rel="modulepreload"> elements (if provided) (af5d49b)

  • Fix a bug with unstable_defaultShouldRevalidate={false} where parent routes that did not export a shouldRevalidate function could be incorrectly included in the single fetch call for new child route data (#​15012)

  • Improve server-side route matching performance by pre-computing flattened/cached route branches (#​14967) (af5d49b)

    • Performance benchmarks showed roughly a 10-15% improvement in server-side request handling performance
  • Mark mask as an optional field in Location for easier mocking in unit tests (#​14999)

  • Cache flattened/ranked route branches to optimize server-side route matching (#​14967)

  • Improve route matching performance in Framework/Data Mode (#​14971) (af5d49b)

    • Avoiding unnecessary calls to matchRoutes in data router scenarios
      • This includes adding back the optimization that was removed in 7.6.0 (#​13562)
      • The issues that prompted the revert have been addressed by using the available router matches but always updating match.route to the latest route in the manifest
    • Leverage pre-computed pre-computing flattened/cached route branches during client side route matching
    • Performance benchmarks showed roughly a 15-30% improvement in server-side request handling performance
typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.3.3

Compare Source

Please refer to CHANGELOG.md for details.

vite-pwa/vite-plugin-pwa (vite-plugin-pwa)

v1.3.0

Compare Source

   🚀 Features
    View changes on GitHub

Configuration

📅 Schedule: (in timezone Europe/Budapest)

  • Branch creation
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 9, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.37%. Comparing base (eeee4c9) to head (da56612).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1663   +/-   ##
=======================================
  Coverage   93.37%   93.37%           
=======================================
  Files          76       76           
  Lines        2386     2386           
  Branches      183      183           
=======================================
  Hits         2228     2228           
  Misses        132      132           
  Partials       26       26           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@KOliver94 KOliver94 merged commit f40f148 into main May 10, 2026
14 checks passed
@KOliver94 KOliver94 deleted the renovate/all-minor-patch-frontend branch May 10, 2026 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant