chore(deps): update all minor and patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/node (source)	^10.56.0 → ^10.57.0
@sentry/types (source)	^10.56.0 → ^10.57.0
@types/node (source)	^25.9.2 → ^25.9.3
mongoose (source)	^9.6.3 → ^9.7.0

---

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v10.57.0

Compare Source

Important Changes

• feat(angular): Add support for Angular 22 (#​21330)

  @sentry/angular now officially supports Angular 22.

• ref(core): Deprecate sendDefaultPii in favor of dataCollection (#​21277)

  sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data.
  sendDefaultPii: true still works and maps to enabling all dataCollection categories.
  dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default.
  Data you set explicitly (like via Sentry.setUser()) is always sent regardless.
  When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

  Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

  Sentry.init({
    dataCollection: {
      userInfo: false,
      genAI: { inputs: false, outputs: false },
      httpBodies: [],
      httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    },
  });

Other Changes

• feat: Use dataCollection.frameContextLines for ContextLines integration (#​21323)
• feat(cloudflare): Auto instrument D1 based on env (#​21276)
• feat(core): Change default of dataCollection.userInfo to true (#​21348)
• feat(core): Default dataCollection.httpBodies to all valid body types (#​21352)
• feat(hono): Filter noisy transactions (favicon etc) (#​21365)
• fix(cloudflare): Don't track negatively sampled spans (#​21367)
• fix(core): Use safeDateNow calls for new Date() reads (#​21351)
• fix(nextjs): Shim pinoIntegration on edge runtime (#​21347)
• fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#​21364)
• fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#​21339)
• fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#​21326)
• fix(react): Remove unused react.componentStack event context (#​21183)
• fix(replays): Record sentry._internal.replay_is_buffering for spans (#​21297)

Internal Changes

• chore: Bump volta node version from 20.19.2 to 20.19.5 (#​21359)
• chore: Remove git:* allowed permissions (#​21328)
• chore(deps-dev): Bump eslint-plugin-regexp from 1.15.0 to 3.1.0 (#​21104)
• chore(deps-dev): Bump react-router from 7.13.0 to 7.15.0 (#​21337)
• chore(size-limit): weekly auto-bump (#​21344)
• docs(remix): Add notice about capturing http bodies for form data keys (#​21296)
• feat(deps): Bump @​types/aws-lambda from 8.10.150 to 8.10.161 (#​21105)
• feat(deps): Bump axios from 1.15.2 to 1.16.0 (#​21251)
• feat(deps): Bump hono from 4.12.18 to 4.12.21 (#​21341)
• ref(browser): Split web vitals integration (#​21210)
• ref(node): Streamline lru-memoizer instrumentation (#​21350)
• ref(node): Streamline sql-common (#​21360)
• test(e2e): Migrate sendDefaultPii to dataCollection option (#​21288)
• test(nextjs): Remove assertion on conditional span (#​21329)
• test(node): Move node integration tests to data collection (#​21283)

Work in this release was contributed by @​zhongrenfei1-hub. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	26.57 KB
@​sentry/browser - with treeshaking flags	25.05 KB
@​sentry/browser (incl. Tracing)	44.44 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.62 KB
@​sentry/browser (incl. Tracing, Profiling)	49.11 KB
@​sentry/browser (incl. Tracing, Replay)	82.73 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	72.6 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.31 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	99.71 KB
@​sentry/browser (incl. Feedback)	43.33 KB
@​sentry/browser (incl. sendFeedback)	31.28 KB
@​sentry/browser (incl. FeedbackAsync)	36.25 KB
@​sentry/browser (incl. Metrics)	27.62 KB
@​sentry/browser (incl. Logs)	27.86 KB
@​sentry/browser (incl. Metrics & Logs)	28.54 KB
@​sentry/react	28.34 KB
@​sentry/react (incl. Tracing)	46.66 KB
@​sentry/vue	31.47 KB
@​sentry/vue (incl. Tracing)	46.29 KB
@​sentry/svelte	26.6 KB
CDN Bundle	28.89 KB
CDN Bundle (incl. Tracing)	46.83 KB
CDN Bundle (incl. Logs, Metrics)	30.36 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.05 KB
CDN Bundle (incl. Replay, Logs, Metrics)	68.72 KB
CDN Bundle (incl. Tracing, Replay)	83.34 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	84.49 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.02 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.18 KB
CDN Bundle - uncompressed	85.72 KB
CDN Bundle (incl. Tracing) - uncompressed	141.58 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	90.1 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	145.25 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	211.99 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	257.67 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	261.32 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	271.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	274.69 KB
@​sentry/nextjs (client)	49.08 KB
@​sentry/sveltekit (client)	44.85 KB
@​sentry/core/server	74.18 KB
@​sentry/core/browser	61.62 KB
@​sentry/node-core	60.28 KB
@​sentry/node	127.37 KB
@​sentry/node - without tracing	72.37 KB
@​sentry/aws-serverless	84.26 KB
@​sentry/cloudflare (withSentry) - minified	169.62 KB
@​sentry/cloudflare (withSentry)	423.68 KB

Automattic/mongoose (mongoose)

v9.7.0

Compare Source

==================

• feat: add Node.js TracingChannel support for APM instrumentation #​16275 #​16105 logaretm
• feat(model): add standard schema adapter for models #​16308 #​16280
• fix(cursor): avoid waiting on buffering to run aggregation middleware #​16289 #​16284
• fix(document): throw error if overwriting array selected with $slice #​16313 #​2432
• fix(schema): remove validateSync() union fallback #​16310 #​16291 AbdelrahmanHafez
• types: cast primitive types within unions when applying create casting #​16320 #​16316
• docs: add llms.txt #​16312 #​15687
• docs: rewrite documents docs #​16298
• docs(model): clarify some details on model.validate() casting #​16308 #​16280
• docs(findOneAndUpdate): clarify update handling of undefined #​16299
• docs(model): fix link to be absolute #​16321 hasezoey

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.