Bump the dev-dependencies group with 2 updates

[dependabot[bot]]

Updates the requirements on @sentry/browser and esbuild to permit the latest version. Updates @sentry/browser to 8.26.0

Release notes

Sourced from @​sentry/browser's releases.

8.26.0

Important Changes

• feat(node): Add fsInstrumentation (#13291)

  This release adds fsIntegration, an integration that instruments the fs API to the Sentry Node SDK. The integration creates spans with naming patterns of fs.readFile, fs.unlink, and so on.

  This integration is not enabled by default and needs to be registered in your Sentry.init call. You can configure via options whether to include path arguments or error messages as span attributes when an fs call fails:

  Sentry.init({
    integrations: [
      Sentry.fsIntegration({
        recordFilePaths: true,
        recordErrorMessagesAsSpanAttributes: true,
      }),
    ],
  });
  

  WARNING: This integration may add significant overhead to your application. Especially in scenarios with a lot of file I/O, like for example when running a framework dev server, including this integration can massively slow down your application.

Other Changes

• feat(browser): Add spotlightBrowser integration (#13263)

• feat(browser): Allow sentry in safari extension background page (#13209)

• feat(browser): Send CLS as standalone span (experimental) (#13056)

• feat(core): Add OpenTelemetry-specific getTraceData implementation (#13281)

• feat(nextjs): Always add browserTracingIntegration (#13324)

• feat(nextjs): Always transmit trace data to the client (#13337)

• feat(nextjs): export SentryBuildOptions (#13296)

• feat(nextjs): Update experimental_captureRequestError to reflect RequestInfo.path change in Next.js canary (#13344)

• feat(nuxt): Always add tracing meta tags (#13273)

• feat(nuxt): Set transaction name for server error (#13292)

• feat(replay): Add a replay-specific logger (#13256)

• feat(sveltekit): Add bundle size optimizations to plugin options (#13318)

• feat(sveltekit): Always add browserTracingIntegration (#13322)

• feat(tracing): Make long animation frames opt-out (#13255)

• fix(astro): Correctly extract request data (#13315)

• fix(astro): Only track access request headers in dynamic page requests (#13306)

• fix(nuxt): Add import line for disabled autoImport (#13342)

• fix(nuxt): Add vue to excludeEsmLoaderHooks array (#13346)

• fix(opentelemetry): Do not overwrite http span name if kind is internal (#13282)

• fix(remix): Ensure origin is correctly set for remix server spans (#13305)

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

8.26.0

Important Changes

• feat(node): Add fsInstrumentation (#13291)

  This release adds fsIntegration, an integration that instruments the fs API to the Sentry Node SDK. The integration creates spans with naming patterns of fs.readFile, fs.unlink, and so on.

  This integration is not enabled by default and needs to be registered in your Sentry.init call. You can configure via options whether to include path arguments or error messages as span attributes when an fs call fails:

  Sentry.init({
    integrations: [
      Sentry.fsIntegration({
        recordFilePaths: true,
        recordErrorMessagesAsSpanAttributes: true,
      }),
    ],
  });
  

  WARNING: This integration may add significant overhead to your application. Especially in scenarios with a lot of file I/O, like for example when running a framework dev server, including this integration can massively slow down your application.

Other Changes

• feat(browser): Add spotlightBrowser integration (#13263)

• feat(browser): Allow sentry in safari extension background page (#13209)

• feat(browser): Send CLS as standalone span (experimental) (#13056)

• feat(core): Add OpenTelemetry-specific getTraceData implementation (#13281)

• feat(nextjs): Always add browserTracingIntegration (#13324)

• feat(nextjs): Always transmit trace data to the client (#13337)

• feat(nextjs): export SentryBuildOptions (#13296)

• feat(nextjs): Update experimental_captureRequestError to reflect RequestInfo.path change in Next.js canary (#13344)

• feat(nuxt): Always add tracing meta tags (#13273)

• feat(nuxt): Set transaction name for server error (#13292)

• feat(replay): Add a replay-specific logger (#13256)

• feat(sveltekit): Add bundle size optimizations to plugin options (#13318)

• feat(sveltekit): Always add browserTracingIntegration (#13322)

• feat(tracing): Make long animation frames opt-out (#13255)

• fix(astro): Correctly extract request data (#13315)

• fix(astro): Only track access request headers in dynamic page requests (#13306)

• fix(nuxt): Add import line for disabled autoImport (#13342)

• fix(nuxt): Add vue to excludeEsmLoaderHooks array (#13346)

• fix(opentelemetry): Do not overwrite http span name if kind is internal (#13282)

... (truncated)

Commits

• bff9dfd release: 8.26.0
• 93fe406 Merge pull request #13351 from getsentry/prepare-release/8.26.0
• 2d4e4f5 meta: Update Changelog for 8.26.0
• 3fc12c6 fix(ci): Fix incorrect changed_any_code check in job_build (#13353)
• fd49d0b fix(nuxt): Add vue to excludeEsmLoaderHooks array (#13346)
• 6c0f01a fix(ci): Bring back job skipping for PRs without code changes (#13340)
• 334f869 docs(vercel-edge): Update @sentry/vercel-edge readme to remove alpha status...
• 043ae7e feat(nextjs): Always transmit trace data to the client (#13337)
• 3871892 feat(nextjs): Update experimental_captureRequestError to reflect `RequestIn...
• e623782 fix(nuxt): Add import line for disabled autoImport (#13342)
• Additional commits viewable in compare view

Updates esbuild to 0.23.1

Release notes

Sourced from esbuild's releases.

v0.23.1

• Allow using the node: import prefix with es* targets (#3821)

  The node: prefix on imports is an alternate way to import built-in node modules. For example, import fs from "fs" can also be written import fs from "node:fs". This only works with certain newer versions of node, so esbuild removes it when you target older versions of node such as with --target=node14 so that your code still works. With the way esbuild's platform-specific feature compatibility table works, this was added by saying that only newer versions of node support this feature. However, that means that a target such as --target=node18,es2022 removes the node: prefix because none of the es* targets are known to support this feature. This release adds the support for the node: flag to esbuild's internal compatibility table for es* to allow you to use compound targets like this:

  // Original code
  import fs from 'node:fs'
  fs.open
  // Old output (with --bundle --format=esm --platform=node --target=node18,es2022)
  
  import fs from "fs";
  
  fs.open;
  // New output (with --bundle --format=esm --platform=node --target=node18,es2022)
  
  import fs from "node:fs";
  
  fs.open;
  
  

• Fix a panic when using the CLI with invalid build flags if --analyze is present (#3834)

  Previously esbuild's CLI could crash if it was invoked with flags that aren't valid for a "build" API call and the --analyze flag is present. This was caused by esbuild's internals attempting to add a Go plugin (which is how --analyze is implemented) to a null build object. The panic has been fixed in this release.

• Fix incorrect location of certain error messages (#3845)

  This release fixes a regression that caused certain errors relating to variable declarations to be reported at an incorrect location. The regression was introduced in version 0.18.7 of esbuild.

• Print comments before case clauses in switch statements (#3838)

  With this release, esbuild will attempt to print comments that come before case clauses in switch statements. This is similar to what esbuild already does for comments inside of certain types of expressions. Note that these types of comments are not printed if minification is enabled (specifically whitespace minification).

• Fix a memory leak with pluginData (#3825)

  With this release, the build context's internal pluginData cache will now be cleared when starting a new build. This should fix a leak of memory from plugins that return pluginData objects from onResolve and/or onLoad callbacks.

Changelog

Sourced from esbuild's changelog.

0.23.1

• Allow using the node: import prefix with es* targets (#3821)

  The node: prefix on imports is an alternate way to import built-in node modules. For example, import fs from "fs" can also be written import fs from "node:fs". This only works with certain newer versions of node, so esbuild removes it when you target older versions of node such as with --target=node14 so that your code still works. With the way esbuild's platform-specific feature compatibility table works, this was added by saying that only newer versions of node support this feature. However, that means that a target such as --target=node18,es2022 removes the node: prefix because none of the es* targets are known to support this feature. This release adds the support for the node: flag to esbuild's internal compatibility table for es* to allow you to use compound targets like this:

  // Original code
  import fs from 'node:fs'
  fs.open
  // Old output (with --bundle --format=esm --platform=node --target=node18,es2022)
  
  import fs from "fs";
  
  fs.open;
  // New output (with --bundle --format=esm --platform=node --target=node18,es2022)
  
  import fs from "node:fs";
  
  fs.open;
  
  

• Fix a panic when using the CLI with invalid build flags if --analyze is present (#3834)

  Previously esbuild's CLI could crash if it was invoked with flags that aren't valid for a "build" API call and the --analyze flag is present. This was caused by esbuild's internals attempting to add a Go plugin (which is how --analyze is implemented) to a null build object. The panic has been fixed in this release.

• Fix incorrect location of certain error messages (#3845)

  This release fixes a regression that caused certain errors relating to variable declarations to be reported at an incorrect location. The regression was introduced in version 0.18.7 of esbuild.

• Print comments before case clauses in switch statements (#3838)

  With this release, esbuild will attempt to print comments that come before case clauses in switch statements. This is similar to what esbuild already does for comments inside of certain types of expressions. Note that these types of comments are not printed if minification is enabled (specifically whitespace minification).

• Fix a memory leak with pluginData (#3825)

  With this release, the build context's internal pluginData cache will now be cleared when starting a new build. This should fix a leak of memory from plugins that return pluginData objects from onResolve and/or onLoad callbacks.

0.23.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.22.0 or ~0.22.0. See npm's documentation about semver for more information.

• Revert the recent change to avoid bundling dependencies for node (#3819)

  This release reverts the recent change in version 0.22.0 that made --packages=external the default behavior with --platform=node. The default is now back to --packages=bundle.

  I've just been made aware that Amazon doesn't pin their dependencies in their "AWS CDK" product, which means that whenever esbuild publishes a new release, many people (potentially everyone?) using their SDK around the world instantly starts using it without Amazon checking that it works first. This change in version 0.22.0 happened to break their SDK. I'm amazed that things haven't broken before this point. This revert attempts to avoid these problems for Amazon's customers. Hopefully Amazon will pin their dependencies in the future.

  In addition, this is probably a sign that esbuild is used widely enough that it now needs to switch to a more complicated release model. I may have esbuild use a beta channel model for further development.

• Fix preserving collapsed JSX whitespace (#3818)

... (truncated)

Commits

• 3327274 publish 0.23.1 to npm
• 38e22ed add a warning/debug log message for #3867
• a15bb51 fix #3825: memory leak of pluginData values
• f6e6481 fix #3838: print comments before case clauses
• 9c13ae1 fix #3853: update go 1.22.4 => 1.22.5
• 78f89e4 fix #3845: some incorrect error message locations
• 892d2a7 fix #3834: cli sometimes panics with --analyze
• 360d472 fix a typo in the release notes
• e3f4e2d fix #3821: allow node: prefix with es* targets
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions