Skip to content

chore(deps): bump @sentry/nextjs from 10.44.0 to 10.45.0#209

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/sentry/nextjs-10.45.0
Open

chore(deps): bump @sentry/nextjs from 10.44.0 to 10.45.0#209
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/sentry/nextjs-10.45.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps @sentry/nextjs from 10.44.0 to 10.45.0.

Release notes

Sourced from @​sentry/nextjs's releases.

10.45.0

Important Changes

  • feat(remix): Server Timing Headers Trace Propagation (#18653)

    The Remix SDK now supports automatic trace propagation via Server-Timing response headers to continue pageload traces on the client side. This means, you no longer have to define a custom meta function to add Sentry <meta> tags to your page as previously. We'll update out Remix tracing docs after this release.

Other Changes

  • fix(cloudflare): Use correct env types for withSentry (#19836)
  • fix(core): Align error span status message with core SpanStatusType for langchain/google-genai (#19863)
  • fix(deno): Clear pre-existing OTel global before registering TracerProvider (#19723)
  • fix(nextjs): Skip tracing for tunnel requests (#19861)
  • fix(node-core): Recycle propagationContext for each request (#19835)
  • ref(core): Simplify core utility functions for smaller bundle (#19854)
  • chore(deps): bump next from 16.1.5 to 16.1.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#19851)
  • ci(release): Switch from action-prepare-release to Craft (#18763)
  • fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 (#19849)
  • fix(deps): bump file-type to 21.3.2 and @​nestjs/common to 11.1.17 (#19847)
  • fix(deps): bump flatted 3.3.1 to 3.4.2 to fix CVE-2026-32141 (#19842)
  • fix(deps): bump hono 4.12.5 to 4.12.7 in cloudflare-hono E2E test app (#19850)
  • fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 and related (#19870)
  • fix(deps): bump tar 7.5.10 to 7.5.11 to fix CVE-2026-31802 (#19846)
  • fix(deps): bump undici 6.23.0 to 6.24.1 to fix multiple CVEs (#19841)
  • fix(deps): bump unhead 2.1.4 to 2.1.12 to fix CVE-2026-31860 and CVE-2026-31873 (#19848)
  • test(nextjs): Skip broken ISR tests (#19871)
  • test(react): Add gql tests for react router (#19844)

Bundle size 📦

Path Size
@​sentry/browser 24.93 KB
@​sentry/browser - with treeshaking flags 23.47 KB
@​sentry/browser (incl. Tracing) 41.51 KB
@​sentry/browser (incl. Tracing, Profiling) 46.07 KB
@​sentry/browser (incl. Tracing, Replay) 79.41 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 69.22 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 84 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 95.97 KB
@​sentry/browser (incl. Feedback) 41.35 KB
@​sentry/browser (incl. sendFeedback) 29.49 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.45.0

Important Changes

  • feat(remix): Server Timing Headers Trace Propagation (#18653)

    The Remix SDK now supports automatic trace propagation via Server-Timing response headers to continue pageload traces on the client side. This means, you no longer have to define a custom meta function to add Sentry <meta> tags to your page as previously. We'll update out Remix tracing docs after this release.

Other Changes

  • fix(cloudflare): Use correct env types for withSentry (#19836)
  • fix(core): Align error span status message with core SpanStatusType for langchain/google-genai (#19863)
  • fix(deno): Clear pre-existing OTel global before registering TracerProvider (#19723)
  • fix(nextjs): Skip tracing for tunnel requests (#19861)
  • fix(node-core): Recycle propagationContext for each request (#19835)
  • ref(core): Simplify core utility functions for smaller bundle (#19854)
  • chore(deps): bump next from 16.1.5 to 16.1.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#19851)
  • ci(release): Switch from action-prepare-release to Craft (#18763)
  • fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 (#19849)
  • fix(deps): bump file-type to 21.3.2 and @​nestjs/common to 11.1.17 (#19847)
  • fix(deps): bump flatted 3.3.1 to 3.4.2 to fix CVE-2026-32141 (#19842)
  • fix(deps): bump hono 4.12.5 to 4.12.7 in cloudflare-hono E2E test app (#19850)
  • fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 and related (#19870)
  • fix(deps): bump tar 7.5.10 to 7.5.11 to fix CVE-2026-31802 (#19846)
  • fix(deps): bump undici 6.23.0 to 6.24.1 to fix multiple CVEs (#19841)
  • fix(deps): bump unhead 2.1.4 to 2.1.12 to fix CVE-2026-31860 and CVE-2026-31873 (#19848)
  • test(nextjs): Skip broken ISR tests (#19871)
  • test(react): Add gql tests for react router (#19844)
Commits
  • ef79d28 release: 10.45.0
  • 28208bc Merge pull request #19877 from getsentry/prepare-release/10.45.0
  • 2e2fd35 meta(changelog): Update changelog for 10.45.0
  • 79241b0 fix(nextjs): Skip tracing for tunnel requests (#19861)
  • 938ab2d ref(core): Simplify core utility functions for smaller bundle (#19854)
  • 3bb4325 fix(core): Align error span status message with core SpanStatusType for lan...
  • 3e5499a fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 an...
  • 6f17b8a fix(cloudflare): Use correct env types for withSentry (#19836)
  • b4b9e71 test(nextjs): Skip broken ISR tests (#19871)
  • ae7206f feat(remix): Server Timing Headers Trace Propagation (#18653)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) from 10.44.0 to 10.45.0.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.44.0...10.45.0)

---
updated-dependencies:
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file frontend Frontend/UI changes labels Mar 19, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 19, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
volvox-website Ready Ready Preview, Comment Mar 19, 2026 11:36pm

Request Review

@claude
Copy link
Copy Markdown
Contributor

claude bot commented Mar 19, 2026

Claude encountered an error —— View job


I'll analyze this and get back to you.

@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Mar 19, 2026

Greptile Summary

This PR is a routine Dependabot-generated minor version bump of @sentry/nextjs from 10.44.0 to 10.45.0, along with the corresponding lockfile updates for all transitive Sentry packages and a minor bump of baseline-browser-mapping.

  • The 10.45.0 release includes a notable Next.js-specific fix: fix(nextjs): Skip tracing for tunnel requests, which is directly applicable to this project.
  • Core bundle size was reduced via utility function simplification.
  • All Sentry sub-packages (@sentry/core, @sentry/browser, @sentry/node, @sentry/react, @sentry/vercel-edge, @sentry/opentelemetry, @sentry/node-core, and internal replay/feedback packages) are consistently bumped to 10.45.0 in the lockfile — no version mismatches.
  • baseline-browser-mapping is bumped from 2.10.8 to 2.10.9 as a transitive dependency of browserslist.
  • No breaking changes are introduced; this is a non-breaking minor release.

Confidence Score: 5/5

  • This PR is safe to merge — it is a minor, non-breaking dependency bump with no application code changes.
  • The change is purely a dependency version bump from 10.44.0 to 10.45.0. The lockfile is consistent with no version mismatches. The release includes only bug fixes and one new Remix-specific feature, with no breaking changes. The Next.js-specific tunnel tracing fix is a welcome improvement for this project.
  • No files require special attention.

Important Files Changed

Filename Overview
package.json Updates @sentry/nextjs version specifier from ^10.44.0 to ^10.45.0 — straightforward and correct.
pnpm-lock.yaml Lockfile updated to resolve all @sentry/* and @sentry-internal/* packages to 10.45.0; also bumps baseline-browser-mapping from 2.10.8 to 2.10.9 as a transitive update.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["@sentry/nextjs@10.45.0"] --> B["@sentry/core@10.45.0"]
    A --> C["@sentry/node@10.45.0"]
    A --> D["@sentry/react@10.45.0"]
    A --> E["@sentry/vercel-edge@10.45.0"]
    A --> F["@sentry/opentelemetry@10.45.0"]
    A --> G["@sentry-internal/browser-utils@10.45.0"]
    C --> H["@sentry/node-core@10.45.0"]
    D --> I["@sentry/browser@10.45.0"]
    I --> J["@sentry-internal/replay@10.45.0"]
    I --> K["@sentry-internal/feedback@10.45.0"]
    I --> L["@sentry-internal/replay-canvas@10.45.0"]
    H --> F
    F --> B
Loading

Last reviewed commit: "chore(deps): bump @s..."

@morph-subagents
Copy link
Copy Markdown

🤖 Morph Preview Test

Preview URL: https://volvox-website-6eqc89x0j-volvox-llc.vercel.app

AI Summary

Issues:

  • None found

Verified:

  • Core navigation and anchor links (Products, Blog, Community, About) function correctly.
  • Footer legal links (Privacy Policy, Terms of Service) load without errors.
  • Primary CTA "Explore Products" and search field interactivity are fully operational.
  • Page rendering and layout remain stable across desktop and mobile viewports.

Notes:

  • Sentry configuration was detected, and no initialization errors were observed in the browser console.

Recording

Preview Recording

View full session →


Automated testing by Morph

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file frontend Frontend/UI changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant